主页 / computer / 问题 / 1692354
Accepted
StarDust
Asked: 2021-12-11 08:07:26 +0800 CST

从同一对等方访问对等方的 Wireguard IP 地址

  • 772

我设置了 Wireguard。我可以连接到10.200.200.1Peer 1 上的地址，Peer 2。但是，我无法连接到10.200.200.1Peer 1。我该怎么做？

对等体 1 的配置：

[Interface]
Address = 10.200.200.1/24
ListenPort = 51820
PrivateKey = ************

# substitute eth0 in the following lines to match the Internet-facing interface
# if the server is behind a router and receives traffic via NAT, these iptables rules are not needed
PostUp = iptables -A FORWARD -i %i -j ACCEPT; iptables -A FORWARD -o %i -j ACCEPT; iptables -t nat -A POSTROUTING -o enp0s2 -j MASQUERADE
PostDown = iptables -D FORWARD -i %i -j ACCEPT; iptables -D FORWARD -o %i -j ACCEPT; iptables -t nat -D POSTROUTING -o enp0s2 -j MASQUERADE

[Peer]
# foo
PublicKey = ***************
#PresharedKey = PRE-SHARED_KEY
AllowedIPs = 10.200.200.2/8

#PersistentKeepalive = 25

curl 10.200.200.1:2001给我

*   Trying 10.200.200.1:2001...
* connect to 10.200.200.1 port 2001 failed: Connection refused
* Failed to connect to 10.200.200.1 port 2001 after 0 ms: Connection refused
* Closing connection 0
curl: (7) Failed to connect to 10.200.200.1 port 2001 after 0 ms: Connection refused

不过我可以ping10.200.200.1通。

wireguard

1 个回答

  1. Best Answer

    好的，我想通了——这有两个部分：

    sysctl

sudo sysctl -w net.ipv4.conf.all.route_localnet=1

sudo sysctl -w net.ipv4.ip_forward=1

    要连接到本地工作：

    sudo iptables -t nat -A OUTPUT -d 10.200.200.1 -j DNAT --to-destination 127.0.0.1

    相关答案：https ://stackoverflow.com/a/70310399/15436715

    • 0

相关问题