openwrt网络配置----pc2(lan接openwrt LAN口)可以ping通pc1(接openwrt WAN口)，pc1无法pc2

openwrt包含lan口和wan口，如下连接pc2(lan接openwrt LAN口)可以ping通pc1(接openwrt WAN口)，pc1无法pc2。

pc2------------lan----WAN------------pc1

pc2：

192.168.3.101

255.255.255.0

192.168.3.100

Openwrt:

Lan

192.168.3.100

255.255.255.0

Wan

10.70.12.120

255.255.255.0

10.70.12.254

pc1:

10.70.12.121

255.255.255.0

10.70.12.254

做如下修改:

(1)、PC1增加默认路由

route add 192.168.3.0 255.255.255.0 10.70.12.120    //可以ping通192.168.3.100

(2)、openwrt firewall文件(etc/config/firewall)增加forwarding 

config forwarding

         option src                   wan

         option dest                lan

可以ping通192.168.3.101

在openwrt上建立socket server时；pc做socket client，当接入openwrt LAN口，接入正常，当接入openwrt WAN口，connect refuse错误；此时需解除防火墙限制。

建立socket server时,需解除防火墙对端口的限制(文件/etc/config/firewall) ;否则socket client断出现socket connect fail 111：Connection refused

# We need to accept udp packets on port 68,

# see https://dev.openwrt.org/ticket/4108 

config rule                               

        option name            Allow-DHCP-Renew

        option src              wan            

        option proto            udp            

        option dest_port        68             

        option target           ACCEPT         

        option family           ipv4