raspberry pi router

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

sudo -i
apt-get install dnsmasq hostapd
vim /etc/dhcpcd.conf
# 并在文件的最后一行添加以下内容
#Disable the dhcp client daemon config (denyinterfaces)
#This is important because otherwise it will be requesting an address from itself and it will also end up having two IP addresses; not the end of the world but also not very tidy. So sudo nano /etc/#dhcpcd.conf and append the following line:
denyinterfaces wlan0

systemctl stop networking.service
systemctl disable networking.service

vim /etc/systemd/network/eth0.network
[Match]
Name=eth0
[Network]
DHCP=yes

vim /etc/systemd/network/wifi.network
[Match]
Name=wlan0
[Network]
Address=192.168.55.1/24

systemctl start systemd-networkd
systemctl enable systemd-networkd

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14

interface=wlan0
ssid=ssid0
hw_mode=g
channel=7
wmm_enabled=0
macaddr_acl=0
auth_algs=1
ignore_broadcast_ssid=0
# ignore_broadcast_ssid=1
wpa=2
wpa_passphrase=password0
wpa_key_mgmt=WPA-PSK
wpa_pairwise=TKIP
rsn_pairwise=CCMP

1

DAEMON_CONF="/etc/hostapd/hostapd.conf"

1
2
3
4
5
6
7
8

sudo mv /etc/dnsmasq.conf /etc/dnsmasq.conf.bak
interface=wlan0                                     # dhcp,dns 服务监听的网络接口地址
listen-address=192.168.55.1                         # Explicitly specify the address to listen on
bind-interfaces                                     # Bind to the interface to make sure we aren't sending things elsewhere,绑定了网卡之后会保证dnsmasq不去骚扰其他网卡,保证请求不乱发,一般跟interface一起使用
server=223.5.5.5                                    # Forward DNS requests to Google DNS
domain-needed                                       # Don't forward short names
bogus-priv                                          # Never forward addresses in the non-routed address spaces.
dhcp-range=192.168.55.10,192.168.55.20,12h          # Assign IP addresses between $1 and $2 with a 12 hour lease time

1
2
3

sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --state RELATED,ESTABLISHED -j ACCEPT
sudo iptables -A FORWARD -i wlan0 -o eth0 -j ACCEPT

1
2
3
4
5

iptables-save > /etc/iptables.ipv4.nat
vim /etc/rc.local
# 在这个文件的exit 0这行的上面加入下面的内容: 

iptables-restore < /etc/iptables.ipv4.nat