1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42

Welcome to n2n v.2.8.0 for Debian buster/sid
Built on Jan  5 2021 11:28:16
Copyright 2007-2020 - ntop.org and contributors

edge <config file> (see edge.conf)
or
edge -d <tun device> -a [static:|dhcp:]<tun IP address> -c <community> [-k <encrypt key>]
    [-s <netmask>] [-u <uid> -g <gid>][-f][-T <tos>][-n cidr:gateway] [-m <MAC address>] -l <supernode host:port>
    [-p <local port>] [-M <mtu>] [-D] [-r] [-E] [-v] [-i <reg_interval>] [-L <reg_ttl>] [-t <mgmt port>] [-A[<cipher>]] [-H] [-z[<compression algo>]] [-h]

-d <tun device>          | tun device name
-a <mode:address>        | Set interface address. For DHCP use '-r -a dhcp:0.0.0.0'
-c <community>           | n2n community name the edge belongs to.
-k <encrypt key>         | Encryption key (ASCII) - also N2N_KEY=<encrypt key>.
-s <netmask>             | Edge interface netmask in dotted decimal notation (255.255.255.0).
-l <supernode host:port> | Supernode IP:port
-i <reg_interval>        | Registration interval, for NAT hole punching (default 20 seconds)
-L <reg_ttl>             | TTL for registration packet when UDP NAT hole punching through supernode (default 0 for not set )
-p <local port>          | Fixed local UDP port.
-u <UID>                 | User ID (numeric) to use when privileges are dropped.
-g <GID>                 | Group ID (numeric) to use when privileges are dropped.
-f                       | Do not fork and run as a daemon; rather run in foreground.
-m <MAC address>         | Fix MAC address for the TAP interface (otherwise it may be random)
                         | eg. -m 01:02:03:04:05:06
-M <mtu>                 | Specify n2n MTU of edge interface (default 1290).
-D                       | Enable PMTU discovery. PMTU discovery can reduce fragmentation but
                         | causes connections stall when not properly supported.
-r                       | Enable packet forwarding through n2n community.
-A1                      | Disable payload encryption. Do not use with key (defaulting to Twofish then).
-A2 ... -A5 or -A        | Choose a cipher for payload encryption, requires a key: -A2 = Twofish (default),
                         | -A5 = Speck-CTR.
-H                       | Enable full header encryption. Requires supernode with fixed community.
-z1 ... -z2 or -z        | Enable compression for outgoing data packets: -z1 or -z = lzo1x (default=disabled).
-E                       | Accept multicast MAC addresses (default=drop).
-S                       | Do not connect P2P. Always use the supernode.
-T <tos>                 | TOS for packets (e.g. 0x48 for SSH like priority)
-n <cidr:gateway>        | Route an IPv4 network via the gw. Use 0.0.0.0/0 for the default gw. Can be set multiple times.
-v                       | Make more verbose. Repeat as required.
-t <port>                | Management UDP Port (for multiple edges on a machine).

Environment variables:
  N2N_KEY                | Encryption key (ASCII). Not with -k.

1
2

#/etc/n2n/supernode.conf
-l=7777     # 监听端口

1
2
3
4
5
6

#/etc/n2n/edge.conf
-d=n2n0
-c=my
-k=密码
-a=10.0.0.*     # n2n地址
-l=1.2.3.4:7777 # supernode的公网IP:端口

1
2
3
4
5
6
7

#/etc/n2n/edge.conf
-d=n2n0
-c=my
-k=密码
-a=10.0.0.*     # n2n地址
-l=1.2.3.4:7777 # supernode的公网IP:端口
-r

1
2

sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -j MASQUERADE

1

sudo sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/g' /etc/sysctl.conf

1
2
3

sudo apt install iptables-persistent
sudo netfilter-persistent save
sudo netfilter-persistent reload

1

iptables -L -n -t nat

1

-n=192.168.10.0/24:10.0.0.10

1

-n=0.0.0.0/0:10.0.0.1

1
2
3
4
5
6
7
8

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.0.0.1        128.0.0.0       UG    0      0        0 n2n0
0.0.0.0(default)192.168.10.1    0.0.0.0         UG    0      0        0 ens33
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 n2n0
1.2.3.4         192.168.10.1    255.255.255.255 UGH   0      0        0 ens33
128.0.0.0       10.0.0.1        128.0.0.0       UG    0      0        0 n2n0
192.168.10.0    0.0.0.0         255.255.255.0   U     0      0        0 ens33

1

ip route add 192.168.10.0/24 via 10.0.0.10 dev n2n0 src 172.16.0.153

1
2
3
4

ip route add 1.2.3.4 via 192.168.10.1 dev ens33 src 192.168.10.10
ip route del default
ip route add default via 10.0.0.1 dev n2n0 src 192.168.10.10
#ip route add 192.168.10.0/24 dev ens33 src 192.168.10.10

1

curl ipinfo.io/ip