Hallo,
ich habe ein paar IPs geändert - ich hoffe mal ich habe keine logischen und sytaktischen Fehler dabei gemacht.
Das ganze ist üprigens eine Corona Notlösung um einem Mitarbeiter von zu Hause aus Zugang zu einem System in einem anderen VPN Netz möglich zu machen,
admin@pi:~$ ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:30:48:59:53:7c brd ff:ff:ff:ff:ff:ff
inet 10.1.199.220/24 brd 10.1.199.255 scope global eth2
valid_lft forever preferred_lft forever
inet6 fe80::230:48ff:fe59:537c/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:30:48:59:53:7d brd ff:ff:ff:ff:ff:ff
inet 192.168.16.252/28 brd 192.168.16.255 scope global eth1
valid_lft forever preferred_lft forever
inet6 fe80::230:48ff:fe59:537d/64 scope link
valid_lft forever preferred_lft forever
4: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
link/ether 00:e0:4c:ef:28:cf brd ff:ff:ff:ff:ff:ff
inet 192.168.120.2/28 brd 192.168.120.15 scope global eth0
valid_lft forever preferred_lft forever
inet6 fe80::2e0:4cff:feef:28cf/64 scope link
valid_lft forever preferred_lft forever
admin@pi:~$ route -n
-bash: route: Kommando nicht gefunden.
admin@pi:~$ sudo route -n
Kernel-IP-Routentabelle
Ziel Router Genmask Flags Metric Ref Use Iface
0.0.0.0 10.1.199.1 0.0.0.0 UG 0 0 0 eth2
0.0.0.0 192.168.120.1 0.0.0.0 UG 0 0 0 eth0
10.1.25.0 192.168.120.1 255.255.255.0 UG 0 0 0 eth0
10.1.25.0 10.1.199.1 255.255.255.0 UG 0 0 0 eth2
10.1.199.0 0.0.0.0 255.255.255.0 U 0 0 0 eth2
10.10.0.88 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.10.0.179 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.10.0.239 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.10.0.240 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.10.0.254 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.132.188 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
10.11.51.0 192.168.120.1 255.255.255.0 UG 0 0 0 eth0
10.3.151.0 192.168.120.1 255.255.255.0 UG 0 0 0 eth0
10.99.12.0 192.168.120.1 255.255.255.0 UG 0 0 0 eth0
141.0.0.0 10.1.199.1 255.0.0.0 UG 0 0 0 eth2
141.20.99.0.0 10.1.199.1 255.255.0.0 UG 0 0 0 eth2
141.20.99.2.4 10.1.199.1 255.255.255.255 UGH 0 0 0 eth2
146.76.2.4 10.1.199.1 255.255.255.255 UGH 0 0 0 eth2
192.168.16.240 0.0.0.0 255.255.255.240 U 0 0 0 eth1
192.168.16.248 192.168.16.254 255.255.255.248 UG 0 0 0 eth1
172.30.250.64 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
172.30.250.83 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
172.30.250.112 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
172.30.250.125 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
172.30.250.181 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
172.30.250.186 192.168.16.254 255.255.255.255 UGH 0 0 0 eth1
192.168.0.0 10.1.199.1 255.255.0.0 UG 0 0 0 eth2
192.168.101.0 0.0.0.0 255.255.255.240 U 0 0 0 eth0
192.168.253.0 192.168.16.254 255.255.255.0 UG 0 0 0 eth1
193.210.217.0 192.168.16.254 255.255.255.0 UG 0 0 0 eth1
193.210.218.0 192.168.16.254 255.255.255.0 UG 0 0 0 eth1
193.210.219.0 192.168.16.254 255.255.255.0 UG 0 0 0 eth1
admin@pi:~$ sudo ip r
default via 10.1.199.1 dev eth2
default via 192.168.120.1 dev eth0 onlink
10.1.25.0/24 via 192.168.120.1 dev eth0
10.1.25.0/24 via 10.1.199.1 dev eth2
10.1.199.0/24 dev eth2 proto kernel scope link src 10.1.199.220
10.10.0.88 via 192.168.16.254 dev eth1
10.10.0.179 via 192.168.16.254 dev eth1
10.10.0.239 via 192.168.16.254 dev eth1
10.10.0.240 via 192.168.16.254 dev eth1
10.10.0.254 via 192.168.16.254 dev eth1
10.132.188 via 192.168.16.254 dev eth1
10.11.51.0/24 via 192.168.120.1 dev eth0
10.3.151.0/24 via 192.168.120.1 dev eth0
10.99.12.0/24 via 192.168.120.1 dev eth0
141.0.0.0/8 via 10.1.199.1 dev eth2
141.20.99.0.0/16 via 10.1.199.1 dev eth2
141.20.99.2.4 via 10.1.199.1 dev eth2
146.76.2.4 via 10.1.199.1 dev eth2
192.168.16.240/28 dev eth1 proto kernel scope link src 192.168.16.252
192.168.16.248/29 via 192.168.16.254 dev eth1
172.30.250.64 via 192.168.16.254 dev eth1
172.30.250.83 via 192.168.16.254 dev eth1
172.30.250.112 via 192.168.16.254 dev eth1
172.30.250.125 via 192.168.16.254 dev eth1
172.30.250.181 via 192.168.16.254 dev eth1
172.30.250.186 via 192.168.16.254 dev eth1
192.168.0.0/16 via 10.1.199.1 dev eth2
192.168.101.0/28 dev eth0 proto kernel scope link src 192.168.120.2
192.168.253.0/24 via 192.168.16.254 dev eth1
193.210.217.0/24 via 192.168.16.254 dev eth1
193.210.218.0/24 via 192.168.16.254 dev eth1
193.210.219.0/24 via 192.168.16.254 dev eth1
admin@pi:~$ sudo ip n s
10.1.199.38 dev eth2 lladdr e4:b9:7a:12:49:87 STALE
10.1.199.27 dev eth2 lladdr 9a:20:54:de:aa:2e STALE
10.1.199.14 dev eth2 lladdr 66:65:35:35:34:65 REACHABLE
10.1.199.16 dev eth2 lladdr 32:37:35:35:65:32 STALE
192.168.120.1 dev eth0 lladdr 50:87:89:b7:ba:18 STALE
10.1.199.10 dev eth2 lladdr 00:e0:4c:04:07:73 STALE
10.1.199.28 dev eth2 lladdr d4:81:d7:99:eb:03 STALE
10.1.199.24 dev eth2 lladdr 04:72:95:3d:55:87 STALE
10.1.199.35 dev eth2 lladdr 8c:ec:4b:eb:73:60 STALE
10.1.199.17 dev eth2 lladdr 84:7b:eb:0b:98:ea STALE
10.1.199.15 dev eth2 lladdr 00:e0:4c:ef:28:74 STALE
10.1.199.22 dev eth2 lladdr 00:80:c8:39:48:c5 STALE
10.1.199.29 dev eth2 lladdr 74:86:7a:6f:ef:0d STALE
10.1.199.11 dev eth2 lladdr 84:7b:eb:45:0c:d9 STALE
10.1.199.200 dev eth2 lladdr 36:32:39:64:63:39 STALE
10.1.199.36 dev eth2 lladdr 00:e0:4c:ef:28:7d STALE
10.1.199.25 dev eth2 lladdr 36:34:66:39:65:36 STALE
10.1.199.30 dev eth2 lladdr 00:00:48:20:48:01 STALE
10.1.199.32 dev eth2 lladdr 00:15:5d:01:6a:19 STALE
10.1.199.23 dev eth2 lladdr f6:b0:14:88:76:3b STALE
10.1.199.26 dev eth2 lladdr 10:65:30:60:30:51 STALE
10.132.188 dev eth1 FAILED
10.1.199.1 dev eth2 lladdr 00:1f:ca:b0:90:ff REACHABLE
10.1.199.40 dev eth2 lladdr 00:15:5d:01:6a:18 REACHABLE
10.1.199.13 dev eth2 lladdr ec:f4:bb:35:8a:d8 STALE
10.1.199.33 dev eth2 lladdr 04:72:95:3d:55:87 STALE
10.1.199.31 dev eth2 lladdr f6:b0:14:88:76:3b STALE
192.168.16.254 dev eth1 lladdr 00:55:92:e6:19:51 REACHABLE
admin@pi:~$ sudo iptables -nvx -L -t nat
Chain PREROUTING (policy ACCEPT 49776 packets, 3451030 bytes)
pkts bytes target prot opt in out source destination
Chain INPUT (policy ACCEPT 3650 packets, 535465 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 8596 packets, 576006 bytes)
pkts bytes target prot opt in out source destination
Chain POSTROUTING (policy ACCEPT 8309 packets, 558786 bytes)
pkts bytes target prot opt in out source destination
45588 2731152 MASQUERADE all -- * eth1 0.0.0.0/0 0.0.0.0/0
admin@pi:~$