Linux 中ip forward功能是一個比較方便實用的功能，只需要簡單配置，添加幾條路由，即可實現ip轉發。本文基于CentOS 7下采取一臺機器充當虛擬路由，來實現Windows環境與Linux環境中相互通信。具體見下文，供大家參考。

一、環境及需求說明

本地測試環境，由于Win7+VMware這臺機器網卡太新，無法被VMware EXSi識別，無奈之下就直接裝了個Win7，然后再上面基于Vmware workstation 12開啟了一些臨時測試的虛擬機。其次本地直連網段192.168.1.0 IP有限，而又希望直接從本機(如圖Win10) ssh連接到這些虛擬機，因此考慮使用Linux的ip轉發功能來實現。

上述圖片中已經列出了各個節點的IP信息，紅色的虛擬機充當軟路由，配置好之后，實現Win10 直接ssh到虛擬機。

二、虛擬路由服務器配置

###查看網卡信息[root@centos7-router ~]# ip addr1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00  inet 127.0.0.1/8 scope host lo   valid_lft forever preferred_lft forever  inet6 ::1/128 scope host    valid_lft forever preferred_lft forever2: eno16777728: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000  link/ether 00:0c:29:9c:eb:2d brd ff:ff:ff:ff:ff:ff  inet 172.24.8.254/24 brd 172.24.8.255 scope global eno16777728   valid_lft forever preferred_lft forever  inet6 fe80::20c:29ff:fe9c:eb2d/64 scope link    valid_lft forever preferred_lft forever3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000  link/ether 00:0c:29:9c:eb:37 brd ff:ff:ff:ff:ff:ff  inet 192.168.1.175/24 brd 192.168.1.255 scope global dynamic eno33554960   valid_lft 82384sec preferred_lft 82384sec  inet6 fe80::20c:29ff:fe9c:eb37/64 scope link    valid_lft forever preferred_lft forever###查看路由表[root@centos7-router ~]# route -nKernel IP routing table ###缺省情況下，每塊網卡都有一個基于本網段的路由記錄Destination  Gateway    Genmask    Flags Metric Ref  Use Iface0.0.0.0    192.168.1.1  0.0.0.0    UG  100  0    0 eno33554960172.24.8.0   0.0.0.0    255.255.255.0 U  100  0    0 eno16777728192.168.1.0  0.0.0.0    255.255.255.0 U  100  0    0 eno33554960###使用ip命令方式查看路由[root@centos7-router ~]# ip route listdefault via 192.168.1.1 dev eno33554960 proto static metric 100 172.24.8.0/24 dev eno16777728 proto kernel scope link src 172.24.8.254 metric 100 192.168.1.0/24 dev eno33554960 proto kernel scope link src 192.168.1.175 metric 100 ###開啟ip forward[root@centos7-router ~]# cp /usr/lib/sysctl.d/50-default.conf /usr/lib/sysctl.d/50-default.conf.bk[root@centos7-router ~]# echo "net.ipv4.ip_forward = 1" >>/usr/lib/sysctl.d/50-default.conf[root@centos7-router ~]# grep ip_forward /usr/lib/sysctl.d/50-default.confnet.ipv4.ip_forward = 1[root@centos7-router ~]# sysctl -p ###如不生效重啟一下OS

三、CentOS7-a主機下添加路由

###查看當前主機ip 信息[root@centos7-a ~]# ip addr list1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN   link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00  inet 127.0.0.1/8 scope host lo   valid_lft forever preferred_lft forever  inet6 ::1/128 scope host    valid_lft forever preferred_lft forever2: eno16777728: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000  link/ether 00:0c:29:57:26:9d brd ff:ff:ff:ff:ff:ff  inet 172.24.8.131/24 brd 172.24.8.255 scope global dynamic eno16777728   valid_lft 1088sec preferred_lft 1088sec  inet6 fe80::20c:29ff:fe57:269d/64 scope link    valid_lft forever preferred_lft forever###查看當前主機路由信息   [root@centos7-a ~]# ip route list172.24.8.0/24 dev eno16777728 proto kernel scope link src 172.24.8.131 metric 100 [root@centos7-a ~]# # Author : Leshami[root@centos7-a ~]# # Blog : http://blog.csdn.net/leshami[root@centos7-a ~]# ip route add default via 172.24.8.254[root@centos7-a ~]# ip route listdefault via 172.24.8.254 dev eno16777728 172.24.8.0/24 dev eno16777728 proto kernel scope link src 172.24.8.131 metric 100 ###測試到虛擬路由器網關ip連通性[root@centos7-a ~]# ping 172.24.8.254 -c 2       PING 172.24.8.254 (172.24.8.254) 56(84) bytes of data.64 bytes from 172.24.8.254: icmp_seq=1 ttl=64 time=0.268 ms64 bytes from 172.24.8.254: icmp_seq=2 ttl=64 time=0.302 ms--- 172.24.8.254 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1000msrtt min/avg/max/mdev = 0.268/0.285/0.302/0.017 ms###測試到虛擬路由器ip連通性[root@centos7-a ~]# ping 192.168.1.175 -c 2PING 192.168.1.175 (192.168.1.175) 56(84) bytes of data.64 bytes from 192.168.1.175: icmp_seq=1 ttl=64 time=0.475 ms64 bytes from 192.168.1.175: icmp_seq=2 ttl=64 time=0.443 ms--- 192.168.1.175 ping statistics ---2 packets transmitted, 2 received, 0% packet loss, time 1000msrtt min/avg/max/mdev = 0.443/0.459/0.475/0.016 ms