http://vikipranata.is-a.dev/id/idtags/networking/ Recent content in IDtags/Networking on Viki Pranata Hugo -- 0.146.0 id Mon, 02 Sep 2024 09:10:00 +0700 http://vikipranata.is-a.dev/id/posts/linux-networking/ Mon, 02 Sep 2024 09:10:00 +0700 http://vikipranata.is-a.dev/id/posts/linux-networking/ <h2 id="konfigurasi-nat-forwarding-di-linux"><em>Konfigurasi NAT Forwarding di Linux</em></h2> <p>Aktifkan parameter kernel</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl"><span class="nb">echo</span> <span class="s1">&#39;net.ipv4.ip_forward = 1&#39;</span> &gt; /etc/sysctl.d/99-forwarding.conf </span></span><span class="line"><span class="cl">sysctl --system </span></span></code></pre></div><p>Konfigurasi firewalld</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-bash" data-lang="bash"><span class="line"><span class="cl">nmcli connection migrate </span></span><span class="line"><span class="cl">nmcli connection modify eth0 connection.zone public </span></span><span class="line"><span class="cl">nmcli device modify eth0 connection.zone public </span></span><span class="line"><span class="cl">nmcli connection modify eth1 connection.zone internal </span></span><span class="line"><span class="cl">nmcli device modify eth1 connection.zone internal </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl">firewall-cmd --permanent --zone<span class="o">=</span>public --add-masquerade </span></span><span class="line"><span class="cl">firewall-cmd --permanent --new-policy NAT-int-to-ext </span></span><span class="line"><span class="cl">firewall-cmd --permanent --policy NAT-int-to-ext --add-ingress-zone internal </span></span><span class="line"><span class="cl">firewall-cmd --permanent --policy NAT-int-to-ext --add-egress-zone public </span></span><span class="line"><span class="cl">firewall-cmd --permanent --policy NAT-int-to-ext --set-target ACCEPT </span></span><span class="line"><span class="cl">firewall-cmd --reload </span></span></code></pre></div><p>Khusus untuk Proxmox Virtual Environment</p>