[桥接]

modprobe bridge

brctl addbr br0

#> ifconfig

eth0      Link encap:Ethernet  HWaddr 00:CC:D0:99:EB:26

inet6 addr: fe80::2b0:d0ff:fe99:eb26/64 Scope:Link

UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1

RX packets:86208855 errors:0 dropped:0 overruns:63 frame:0

TX packets:77098217 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:3871506445 (3692.1 Mb)  TX bytes:266311184 (253.9 Mb)

Interrupt:5 Base address:0xec00

eth1      Link encap:Ethernet  HWaddr 00:CC:03:D8:3A:1A

inet6 addr: fe80::201:3ff:fed8:3a1a/64 Scope:Link

UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1

RX packets:77087614 errors:0 dropped:0 overruns:0 frame:0

TX packets:85110321 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:264995582 (252.7 Mb)  TX bytes:3672580334 (3502.4 Mb)

Interrupt:9 Base address:0xec80

/etc/sysconfig/networking-scripts/ifcfg-eth0:

DEVICE=eth0

ONBOOT=yes

BOOTPROTO=static

/etc/sysconfig/networking-scripts/ifcfg-eth1:

DEVICE=eth1

ONBOOT=yes

BOOTPROTO=static

#> brctl addif br0 eth0

#> brctl addif br0 eth1

#> ip link set br0 up

#> ip addr add 10.1.1.18/16 brd + dev br0

#> route add default gw 10.1.1.1 dev br0

#> brctl show

bridge name  bridge id          STP enabled  interfaces

br0          8000.0030843e5aa2  no           eth0

eth1

[桥接下防火墙设置]

#> tar -xzf ebtables-v2.0.6.tar.gz

#> cd ebtables-v2.0.6

#> make

#> install

#> ebtables -V

ebtables v2.0.6 (November 2003)

#> service iptables stop

#> chkconfig --level 35 iptables off

#> iptables -L

#> iptables -F INPUT

#> iptables -F OUTPUT

#> iptables -F FORWARD

#> iptables -F RH-Firewall-1-INPUT

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.2.0.0/16 -j DROP

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.7.0.0/16 -j DROP

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.4.0.0/16 -j DROP

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.5.0.0/16 -j DROP

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.6.0.0/16 -j DROP

/sbin/ebtables -A FORWARD -p IPv4 \--ip-source 10.1.0.0/16 -j DROP

/sbin/ebtables -I FORWARD 1 -p IPv4 \--ip-source 10.1.1.5 -j ACCEPT

/sbin/ebtables -I FORWARD 1 -p IPv4 \--ip-source 10.1.1.18 -j ACCEPT

/sbin/ebtables -I FORWARD 1 -p IPv4 \--ip-source 10.1.10.30 -j ACCEPT

/sbin/ebtables -I FORWARD 1 -p IPv4 \--ip-source 10.1.10.19 -j ACCEPT

/sbin/ebtables -I FORWARD 1 -p IPv4 \--ip-source 10.1.10.87 -j ACCEPT