ZeroTier配置节点访问的教程

### 用`ifconfig`命令查看ZeroTier后的虚拟网卡
```swift
ifconfig
```
![](/media/202311/微信截图_20231101154211_1698828140.png)
上图为群晖NAS的虚拟网卡，名称是`eth50`
### 进入/etc/目录编辑sysctl.conf文件设置转发
```javascript
vi /etc/sysctl.conf
```
上面的命令以群晖为例
### 启用转发
```javascript
sudo sysctl -w net.ipv4.ip_forward=1
```
### 以下是修改后的示例代码
```javascript
kernel.panic = 3
net.core.somaxconn = 65535
net.ipv4.tcp_tw_reuse  = 1
fs.protected_hardlinks = 1
fs.protected_symlinks = 1
kernel.syno_forbid_console=0
kernel.syno_forbid_usb=0
net.ipv6.conf.default.accept_ra_defrtr=0
net.ipv4.conf.default.accept_redirects=0
net.ipv6.conf.default.accept_redirects=0
net.ipv4.conf.default.send_redirects=0
net.ipv4.conf.default.secure_redirects=0
net.ipv6.conf.default.accept_ra=0
net.ipv4.ip_forward = 1
```
### 配置iptables
```javascript
PHY_IFACE=eth0; ZT_IFACE=ztxfj6u3nb
```
如果是群晖，刚将`zt7nnig26`改成`eth50`，其他的Linux或路由器一般是以`ZT`开头
### 向 iptables 添加规则

```javascript
sudo iptables -t nat -A POSTROUTING -o $PHY_IFACE -j MASQUERADE
```
```javascript
sudo iptables -A FORWARD -i $PHY_IFACE -o $ZT_IFACE -m state --state RELATED,ESTABLISHED -j ACCEPT
```
```javascript
sudo iptables -A FORWARD -i $ZT_IFACE -o $PHY_IFACE -j ACCEPT
```
### 保存 iptables 规则以供下次启动
```javascript
sudo apt install iptables-persistent
```
```javascript
sudo bash -c iptables-save > /etc/iptables/rules.v4
```