Somerdata AROW Series, Дополнительные инструкции по установке и эксплуатации

Страница: 22 / 82

AROW Series
Data Diode
Installation and Operation 5-4
(Note, -d -d is optional and is useful for confirming a network connection
to AROW.)
Now we should have a "tun" interface entry in "ip addr" or "ifconfig" of
each of the hosts.
On the low side gateway machine (L-GW) add a line to the routing table
that send packets for the 10.0.1.0/24 network over the tunnel:
# route add -net 10.0.1.0/24 gw 192.168.254.1
On each of the low side host machines (L1, L2... Ln), add a line to the
routing table to send any packets for the 10.0.1.0/24 network to L-GW
# route add -net 10.0.1.0/24 gw 10.0.0.20
Sending UDP over that tunnel is simple. For instance:
On a high side host (for example H1 having the ip address 10.0.1.5):
$ netcat -u -s 10.0.1.5 -p 50002 10.0.0.5 50001
And on a low side host (for example L1 having the ip address 10.0.0.5):
$ netcat -u -s 10.0.0.5 -p 50001 10.0.1.5 50002
Now any packets sent from the low side netcat instance will be received
by the netcat instance on the high side. Packets sent from the high side
will be silently dropped.
UDP/Multicast Data
UDP data requires some attention to routing. Since the destination
network cannot be resolved from the source network, the routing table
form the source must explicitly declare a route and an appropriate
gateway.
Taking the addresses form the TCP example above, first add a gateway
route on the low-side to the high-side:
Linux: ( with root privileges)
sudo route add
–net 10.0.1.0/24 via 10.0.0.9
This tells the router to send all packets destined for network 10.0.1.x
through the gateway 10.0.0.9 ( the low-side diode port).
The high-side route also needs to be established so that ARP requests
can be resolved correctly.
sudo route add
–net 10.0.0.0/24 [dev eth0]
The optional dev eth0 specifies a particular network device, if the router
is a configured pc platform for example.
To test this, use netcat as the SOCAT example above, or install a
streaming media player like VLC and send test data across the diode.
A webcam can be used as a source of streaming data: