{"id":3649,"date":"2026-10-13T11:02:35","date_gmt":"2026-10-13T09:02:35","guid":{"rendered":"https:\/\/ahassan.inscastellbisbal.net\/?page_id=3649"},"modified":"2026-10-14T09:25:06","modified_gmt":"2026-10-14T07:25:06","slug":"configuracio-de-la-pasarella-de-xarxa","status":"publish","type":"page","link":"https:\/\/ahassan.inscastellbisbal.net\/?page_id=3649","title":{"rendered":"Configuraci\u00f3 de la pasarel\u00b7la de xarxa"},"content":{"rendered":"\n

Instal-lar Rocky router:<\/p>\n\n\n\n

Preparar la M\u00e0quina Virtual (VirtualBox o similar)<\/h3>\n\n\n\n
    \n
  1. Crear una nova VM:<\/strong>\n
      \n
    • Nom:<\/strong> Rocky-Router<\/code><\/li>\n\n\n\n
    • Tipus:<\/strong> Linux<\/code><\/li>\n\n\n\n
    • Versi\u00f3:<\/strong> Red Hat (64-bit)<\/code> o Rocky Linux (64-bit)<\/code><\/li>\n\n\n\n
    • Assigna mem\u00f2ria RAM (amb 2 GB<\/strong> en t\u00e9 prou per a un entorn de proves) i un disc dur virtual de 20 GB<\/strong>.<\/li>\n<\/ul>\n<\/li>\n\n\n\n
    • Configurar les 2 Xarxes (Molt Important):<\/strong>\n
        \n
      • Adaptador 1:<\/strong> Configura’l com a Xarxa Bridged (Pont)<\/strong> o NAT<\/strong>. Aquesta ser\u00e0 la interf\u00edcie<\/strong> que surti a Internet<\/strong> (WAN<\/code>).<\/li>\n\n\n\n
      • Adaptador 2:<\/strong> Configura’l com a Xarxa Interna<\/strong> (per exemple, amb el nom XarxaLocal<\/strong><\/code>). Aquesta ser\u00e0 la interf\u00edcie<\/strong> que donar\u00e0<\/strong> servei als clients<\/strong> de la teva xarxa interna<\/strong> (LAN<\/code>).<\/li>\n<\/ul>\n<\/li>\n\n\n\n
      • Carregar la ISO:<\/strong> Afegeix la ISO de Rocky Linux<\/strong> que vem instal<\/strong>–lar<\/strong> des de FTP<\/strong>.<\/li>\n<\/ol>\n\n\n\n

        Configurar les Interf\u00edcies de Xarxa (WAN i LAN)<\/h3>\n\n\n\n

        Un cop dins del sistema<\/strong> (inicia sessi\u00f3 com a root<\/strong><\/code>), el primer \u00e9s identificar<\/strong> quina targeta<\/strong> \u00e9s quina amb el comandament<\/strong>:<\/p>\n\n\n\n

        ip link<\/code><\/pre>\n\n\n\n
        \"\"<\/figure>\n\n\n\n
        (Suposarem que enp0s3<\/strong><\/code> \u00e9s la WAN<\/strong> connectada<\/strong> a Internet i enp0s8<\/code> \u00e9s la LAN<\/strong> interna).<\/em><\/p>\n\n\n\n
        Utilitzarem NetworkManager<\/strong> (nmcli<\/strong><\/code>) o editarem els fitxers<\/strong> de configuraci\u00f3<\/strong> per assignar els IP<\/strong> correctes:<\/p>\n\n\n\n
          \n
        1. Configurar la WAN (enp0s3<\/code>):<\/strong> Si rep IP autom\u00e0tica<\/strong> del teu ro\u00fater<\/strong> principal:<\/li>\n<\/ol>\n\n\n\n
          nmcli connection modify enp0s3 ipv4.method auto<\/code><\/pre>\n\n\n\n
          Crear el perfil de connexi\u00f3 si no existeix<\/h3>\n\n\n\n
          Si NetworkManager et diu que el dispositiu \u00e9s \u00abdesconegut\u00bb o no t\u00e9 connexi\u00f3 associada, l’hem de crear manualment. Fes el seg\u00fcent:<\/p>\n\n\n\n
            \n
          1. Crear la connexi\u00f3 per a la LAN (enp0s8<\/code>)<\/strong>:<\/li>\n<\/ol>\n\n\n\n
            nmcli connection add type ethernet ifname enp0s8 con-name enp0s8<\/code><\/pre>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            Configurar la LAN (enp0s8<\/code>) amb una IP est\u00e0tica:<\/strong> Aquesta ser\u00e0 la IP de la porta d’enlla\u00e7 per als teus equips interns (per exemple, 192.168.100.1\/24<\/code>):<\/p>\n\n\n\n
            nmcli connection modify enp0s8 ipv4.addresses 192.168.100.1\/24\nnmcli connection modify enp0s8 ipv4.method manual\nnmcli connection up enp0s8<\/code><\/pre>\n\n\n\n
            \"\"<\/figure>\n\n\n\n
            Activar el Forwarding (Encaminament IP)<\/h3>\n\n\n\n
            Perqu\u00e8 el sistema Rocky Linux accepti reenvia tr\u00e0nsit d’una xarxa a una altra (funcioni com a r\u00fater), cal activar el reenviament de paquets al nucli de Linux:<\/p>\n\n\n\n
              \n
            1. Crea un fitxer de configuraci\u00f3 per a sysctl:<\/li>\n<\/ol>\n\n\n\n
              nano \/etc\/sysctl.d\/99-ip-forward.conf<\/code><\/pre>\n\n\n\n
                    2.Afegeix la l\u00ednia seg\u00fcent:<\/p>\n\n\n\n
              net.ipv4.ip_forward = 1<\/code><\/pre>\n\n\n\n
              \"\"<\/figure>\n\n\n\n
                    3.Guarda el fitxer i aplica els canvis immediatament amb:<\/p>\n\n\n\n
              sysctl --system<\/code><\/pre>\n\n\n\n
              \"\"<\/figure>\n\n\n\n
              Configurar el tallafocs (Firewalld) amb NAT \/ Masquerading<\/h3>\n\n\n\n
              Rocky Linux utilitza firewalld<\/code> per defecte. Hem de configurar la interf\u00edcie externa com a external<\/code> (amb NAT activat) i la interna com a internal<\/code> o trusted<\/code>:<\/p>\n\n\n\n
                \n
              1. Assigna cada interf\u00edcie a la seva zona corresponent del tallafocs:<\/li>\n<\/ol>\n\n\n\n
                firewall-cmd --zone=external --add-interface=enp0s3 --permanent
                firewall-cmd --zone=trusted --add-interface=enp0s8 --permanent<\/code><\/pre>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                Activa el Masquerading<\/strong> (el NAT de Linux) a la zona externa perqu\u00e8 les IP privades de la LAN puguin sortir a Internet disfressades amb la IP de la WAN:<\/p>\n\n\n\n
                firewall-cmd --zone=external --add-masquerade --permanent<\/code><\/pre>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                Recarrega el tallafocs per aplicar els canvis:<\/p>\n\n\n\n
                firewall-cmd --reload<\/code><\/pre>\n\n\n\n
                Comprova des del client si tens sortida a Internet fent un ping:<\/p>\n\n\n\n
                ping 8.8.8.8<\/code><\/pre>\n\n\n\n
                \"\"<\/figure>\n\n\n\n
                Configuraci\u00f3 de pasarel-la:<\/h2>\n\n\n\n
                Maquines<\/td>IP address<\/td>Mascara<\/td>Gateway(pasarel-la)<\/td><\/tr>
                Debian<\/strong><\/td>192.168.100.50<\/td>255.255.255.0<\/td>192.168.100.1<\/td><\/tr>
                Rocky linux<\/strong><\/td>192.168.100.51<\/td>255.255.255.0<\/td>192.168.100.1<\/td><\/tr>
                Windows 2019<\/strong><\/td>192.168.100.52<\/td>255.255.255.0<\/td>192.168.100.1<\/td><\/tr>
                Ubuntu debian<\/strong><\/td>192.168.100.53<\/td>255.255.255.0<\/td>192.168.100.1<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n
                Aquestes<\/strong> son la pasarel<\/strong>–la<\/strong> gateway<\/strong> que tenim posat a totes maquines<\/strong> i que estan connectat<\/strong> a Xarxa<\/strong> router<\/strong> i si fem ping<\/strong> ens respon<\/strong>.<\/p>\n\n\n\n
                <\/p>\n","protected":false},"excerpt":{"rendered":"
                Instal-lar Rocky router: Preparar la M\u00e0quina Virtual (VirtualBox o similar) Configurar les Interf\u00edcies de Xarxa (WAN i LAN) Un cop dins del sistema (inicia sessi\u00f3 com a root), el primer \u00e9s identificar quina targeta \u00e9s quina amb el comandament: (Suposarem que enp0s3 \u00e9s la WAN connectada a Internet i enp0s8 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":3490,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3649","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/pages\/3649","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3649"}],"version-history":[{"count":7,"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/pages\/3649\/revisions"}],"predecessor-version":[{"id":3676,"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/pages\/3649\/revisions\/3676"}],"up":[{"embeddable":true,"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=\/wp\/v2\/pages\/3490"}],"wp:attachment":[{"href":"https:\/\/ahassan.inscastellbisbal.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3649"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}