IP配置方法及相关工具的介绍

时间  2020-08-12
标签 配置 方法 相关 工具 介绍 繁體版
原文   原文链接

CentOS 6 网卡名称
Centos6网卡接口命名方式：promise

  • 以太网：eth[0, 1, 2, ...]
  • PPP：ppp[0, 1, 2, …]

网络接口识别并命名相关的udev配置文件： /etc/udev/rules.d/70-persistent-net.rules
此文件主要是记录网卡的信息，这个文件在虚拟机克隆的时候比较有用处，通常说来，虚拟机克隆，相应也会把网卡物理地址克隆过来，因此须要到这个文件里把相应的网卡记录删除，而后重启，或者从新加载网卡驱动服务器

cat /etc/udev/rules.d/70-persistent-net.rules 
# This file was automatically generated by the /lib/udev/write_net_rules
# program, run by the persistent-net-generator.rules rules file.
#
# You can modify it, as long as you keep each rule on a single
# line, and change only the value of the NAME= key.

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:ae:f9:a9", ATTR{type}=="1", KERNEL=="eth*", NAME="eth0"

# PCI device 0x8086:0x100f (e1000)
SUBSYSTEM=="net", ACTION=="add", DRIVERS=="?*", ATTR{address}=="00:0c:29:ae:f9:b3", ATTR{type}=="1", KERNEL=="eth*", NAME="eth1"

查看网卡信息网络

[root@Centos6 ~]# dmesg |grep -i eth
e1000 0000:02:01.0: eth0: (PCI:66MHz:32-bit) 00:0c:29:ae:f9:a9
e1000 0000:02:01.0: eth0: Intel(R) PRO/1000 Network Connection
e1000 0000:02:04.0: eth1: (PCI:66MHz:32-bit) 00:0c:29:ae:f9:b3
e1000 0000:02:04.0: eth1: Intel(R) PRO/1000 Network Connection
e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
eth0: no IPv6 routers present
e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
ADDRCONF(NETDEV_UP): eth0: link is not ready
ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
eth0: no IPv6 routers present
e1000 0000:02:01.0: eth0: (PCI:66MHz:32-bit) 00:0c:29:ae:f9:a9
e1000 0000:02:01.0: eth0: Intel(R) PRO/1000 Network Connection
ADDRCONF(NETDEV_UP): eth0: link is not ready
e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None
ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready
e1000 0000:02:04.0: eth1: (PCI:66MHz:32-bit) 00:0c:29:ae:f9:b3
e1000 0000:02:04.0: eth1: Intel(R) PRO/1000 Network Connection
eth0: no IPv6 routers present

[root@Centos6 ~]# ethtool -i eth0
driver: e1000
version: 7.3.21-k8-NAPI
firmware-version: 
bus-info: 0000:02:01.0
supports-statistics: yes
supports-test: yes
supports-eeprom-access: yes
supports-register-dump: yes
supports-priv-flags: no

卸载网卡驱动app

[root@Centos6 ~]# modprobe -r e1000
或
[root@Centos6 ~]# rmmod e1000

装载网卡驱动负载均衡

[root@Centos6 ~]# modprobe e1000

网络配置方式ssh

  • 静态指定
    • ifconfig ,route ,netstat
    • ip: object {link, add, route}, ss, tc
    • system-config-network-tui, setup
    • 配置文件
  • 动态分配
    • DHCP：Dynamic Host Configuration Protocol

配置网络接口
ifconfig命令
ifconfig [interface]
ifconfig -a
ifconfig IFAC [up|down]
ifconfig interface [aftype] option | address …
ifconfig IFACE IP/netmask [up]
ifconfig IFACE IP net mask NETMASK
注意：当即生效
启用混杂模式：[-] promisesocket

[root@Centos7 ~]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.0.17.93  netmask 255.255.254.0  broadcast 10.0.17.255
        inet6 fe80::2ac2:85fc:c7a1:ba02  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:f1  txqueuelen 1000  (Ethernet)
        RX packets 9819  bytes 830422 (810.9 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 75  bytes 13561 (13.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.132  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::41d4:5d69:d41a:6ae6  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:fb  txqueuelen 1000  (Ethernet)
        RX packets 91  bytes 10295 (10.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 33  bytes 5706 (5.5 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1  (Local Loopback)
        RX packets 24  bytes 2808 (2.7 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 24  bytes 2808 (2.7 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

配置别名eth1:1 192.168.1.200 netmask 255.255.255.0tcp

[root@Centos7 ~]# ifconfig eth1:1 192.168.1.200 netmask 255.255.255.0

[root@Centos7 ~]# ifconfig 
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.0.17.93  netmask 255.255.254.0  broadcast 10.0.17.255
        inet6 fe80::2ac2:85fc:c7a1:ba02  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:f1  txqueuelen 1000  (Ethernet)
        RX packets 11574  bytes 961152 (938.6 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 184  bytes 28669 (27.9 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.132  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::41d4:5d69:d41a:6ae6  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:fb  txqueuelen 1000  (Ethernet)
        RX packets 94  bytes 10752 (10.5 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 41  bytes 6784 (6.6 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1:1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.200  netmask 255.255.255.0  broadcast 192.168.1.255
        ether 00:0c:29:03:fc:fb  txqueuelen 1000  (Ethernet)

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1  (Local Loopback)
        RX packets 28  bytes 3144 (3.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 28  bytes 3144 (3.0 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

重启服务或执行ifconfig eth1:1 down就能够消除刚配置的别名eth1:1ide

[root@Centos7 ~]# ifconfig eth1:1 down
[root@Centos7 ~]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.0.17.93  netmask 255.255.254.0  broadcast 10.0.17.255
        inet6 fe80::2ac2:85fc:c7a1:ba02  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:f1  txqueuelen 1000  (Ethernet)
        RX packets 12327  bytes 1022949 (998.9 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 276  bytes 42737 (41.7 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.1.132  netmask 255.255.255.0  broadcast 192.168.1.255
        inet6 fe80::41d4:5d69:d41a:6ae6  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:03:fc:fb  txqueuelen 1000  (Ethernet)
        RX packets 95  bytes 10854 (10.5 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 42  bytes 6907 (6.7 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1  (Local Loopback)
        RX packets 28  bytes 3144 (3.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 28  bytes 3144 (3.0 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

route命令
route：路由管理命令
查看：route -n
添加：route add
route add [-net | -host] target [netmask Nm] [gw GW] [[dev] IF]
例如：
目标：192.168.100.1 网关是192.168.1.1工具

[root@Centos7 ~]# route add -host 192.168.100.1 gw 192.168.1.1 dev eth1

删除

[root@Centos7 ~]# route del -host 192.168.100.1

目标：192.168.0.0 网关：192.168.1.1

[root@Centos7 ~]# route add -net 192.168.0.0 netmask 255.255.255.0 gw 192.168.1.1 dev eth1

删除

[root@Centos7 ~]# route del -net 192.168.0.0 netmask 255.255.255.0

默认路由，网关：192.168.1.1

[root@Centos7 ~]# route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.1.1 dev eth1
或
[root@Centos7 ~]# route add default gw 192.168.1.1 eth1

删除

[root@Centos7 ~]# route del default gw 192.168.1.1

netstat命令
netstat 显示网络链接
netstat [--tcp|-t] [--udp|-u] [--raw|-w] [--listening|-l] [--all|-a] [--numeric|-n] [--extend|-e [--extend|-e]] [--program|-p]

  • -t：tcp协议相关
  • -u：udp协议相关
  • -w：raw socke相关
  • -l：处于监听状态
  • -a：全部状态
  • -n：以数字显示IP或端口
  • -e：扩展格式
  • -p：显示相关进程及PID
    经常使用组合：
  • -tan
  • -uan
  • -tnl
  • -unl
    显示路由表：
    netstat {--route|-r} [--numric|-n]
  • -r：显示内核路由表
  • -n：数字格式
    显示接口统计数据：
    netstat {--interfaces|-I|-i} [iface] [--all|-a] [--extend|-e] [--program|-p] [--numeric|-n] 
    [root@Centos7 ~]# netstat -i
Kernel Interface table
Iface      MTU    RX-OK RX-ERR RX-DRP RX-OVR    TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0      1500    21895      0      0 0          1043      0      0      0 BMRU
eth1      1500      142      0      0 0            48      0      0      0 BMRU
lo       65536       28      0      0 0            28      0      0      0 LRU

root@Centos7 ~]# netstat -I=eth1
Kernel Interface table
Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth1 1500 142 0 0 0 48 0 0 0 BMRU

[root@Centos7 ~]# ifconfig -s eth1
Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth1 1500 142 0 0 0 48 0 0 0 BMRU

[root@Centos7 ~]# ifconfig -s
Iface MTU RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0 1500 22346 0 0 0 1163 0 0 0 BMRU
eth1 1500 143 0 0 0 48 0 0 0 BMRU
lo 65536 28 0 0 0 28 0 0 0 LRU

ip命令
ip命令：配置Linux网络属性
* ip - show / manipulate routing, devices, policy routing and tunnels 
    * ip [OPTIONS] OBJECT {COMMAND | help}
        * OBJECT := {link|addr|route}
* ip link - network device configuration
    * set dev IFACE
        * 可设置属性：
            * up and down：激活禁用指定接口
                * ifup/ifdown
    * show [dev IFACE]：指定接口
        * [up]：仅显示处于激活状态的接口
* ip adds {add|del} IFADDR dev STRING 
    * [label|LABEL]：添加地址时指明网卡别名
    * [scope {global|link|host}]：指明做用域
        * global：全局可用
        * link：仅链路连接可用
        * 本机可用
    * [broadcast ADDRESS]：指明广播地址
* ip address show - look at protocol address
    * [dev DEVICE]
    * [lable PATTERN]
    * [primary and secondary]
* ip adds flush：清除协议地址；使用格式同show
例如：

[root@Centos7 ~]# ip addr add 192.168.1.100 dev eth1 label eth1:1
[root@Centos7 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:f1 brd ff:ff:ff:ff:ff:ff
inet 10.0.17.93/23 brd 10.0.17.255 scope global dynamic eth0
valid_lft 534264sec preferred_lft 534264sec
inet6 fe80::2ac2:85fc:c7a1:ba02/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:fb brd ff:ff:ff:ff:ff:ff
inet 192.168.1.132/24 brd 192.168.1.255 scope global dynamic eth1
valid_lft 1575sec preferred_lft 1575sec
inet 192.168.1.100/32 scope global eth1:1
valid_lft forever preferred_lft forever
inet6 fe80::41d4:5d69:d41a:6ae6/64 scope link
valid_lft forever preferred_lft forever

[root@Centos7 ~]# ifconfig
eth0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 10.0.17.93 netmask 255.255.254.0 broadcast 10.0.17.255
inet6 fe80::2ac2:85fc:c7a1:ba02 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:03:fc:f1 txqueuelen 1000 (Ethernet)
RX packets 26277 bytes 2124374 (2.0 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 1261 bytes 192229 (187.7 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.132 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::41d4:5d69:d41a:6ae6 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:03:fc:fb txqueuelen 1000 (Ethernet)
RX packets 156 bytes 18707 (18.2 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 58 bytes 9593 (9.3 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eth1:1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.100 netmask 255.255.255.255 broadcast 0.0.0.0
ether 00:0c:29:03:fc:fb txqueuelen 1000 (Ethernet)

lo: flags=73<UP,LOOPBACK,RUNNING> mtu 65536
inet 127.0.0.1 netmask 255.0.0.0
inet6 ::1 prefixlen 128 scopeid 0x10<host>
loop txqueuelen 1 (Local Loopback)
RX packets 28 bytes 3144 (3.0 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 28 bytes 3144 (3.0 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

[root@Centos7 ~]# ip del add 192.168.1.100 dev eth1 label eth1:1
Object "del" is unknown, try "ip help".
[root@Centos7 ~]# ip addr del 192.168.1.100 dev eth1 label eth1:1
Warning: Executing wildcard deletion to stay compatible with old scripts.
Explicitly specify the prefix length (192.168.1.100/32) to avoid this warning.
This special behaviour is likely to disappear in further releases,
fix your scripts!
[root@Centos7 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:f1 brd ff:ff:ff:ff:ff:ff
inet 10.0.17.93/23 brd 10.0.17.255 scope global dynamic eth0
valid_lft 534151sec preferred_lft 534151sec
inet6 fe80::2ac2:85fc:c7a1:ba02/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:fb brd ff:ff:ff:ff:ff:ff
inet 192.168.1.132/24 brd 192.168.1.255 scope global dynamic eth1
valid_lft 1462sec preferred_lft 1462sec
inet6 fe80::41d4:5d69:d41a:6ae6/64 scope link
valid_lft forever preferred_lft forever

[root@Centos7 ~]# ip addr flush dev eth1 label eth1:1
[root@Centos7 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:f1 brd ff:ff:ff:ff:ff:ff
inet 10.0.17.93/23 brd 10.0.17.255 scope global dynamic eth0
valid_lft 534135sec preferred_lft 534135sec
inet6 fe80::2ac2:85fc:c7a1:ba02/64 scope link
valid_lft forever preferred_lft forever
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:03:fc:fb brd ff:ff:ff:ff:ff:ff
inet 192.168.1.132/24 brd 192.168.1.255 scope global dynamic eth1
valid_lft 1446sec preferred_lft 1446sec
inet6 fe80::41d4:5d69:d41a:6ae6/64 scope link
valid_lft forever preferred_lft forever

* ip route - routing table management
    * 添加路由：ip route add
    * ip route add TARGET via GW dev IFACE src SOURCE_IP
        * TARGET：
            * 主机路由：IP
                * ip route add 192.168.0.11 via 192.168.1.1 dev eth1
            * 网络路由：NETWORK/MASK
                * ip route add 192.168.2.0/24 via 192.168.1.1 dev eth1
            * 默认网关：
                * ip route add default via 192.168.1.1
    * 删除路由：ip route del TARGET
        * 删除主机路由：ip route del 192.168.0.11
        * 删除网络路由：ip route del 192.168.2.0/24
        * 删除默认路由：ip route del default via 192.168.1.1
    * 显示路由：ip route show | list
    * 清空路由表：ip route flush dev IFACE  [via PREFIX]
        * ip route flush dev eth1          (清空全部eth1上的路由表）若是不加

ss命令
* 格式：ss [OPTION]… [FILTER]
* netstat经过比那里proc来获取socket信息，ss使用netlink与内核tcp_diag模块通讯获取socket信息   
* 选项
    * -t：tcp协议相关
    * -u：udp协议相关
    * -w：裸套接字相关
    * -x：unix sock相关
    * -l：listen状态的连接
    * -a：全部
    * -n：数字格式
    * -p：相关的程序及PID
    * -e：扩展的信息
    * -m：内存用量
    * -o：计时器信息
* FILTER：[state TCP-STATE] [EXPRESSION]
*  TCP的常见状态：
    * tcp finite state machine：
        * LISTEN：监听
        * ESTABLISHED：已创建的连接
        * FIN_WAIT_1
        * FIN_WAIT_2
        * SYN_SENT
        * SYN_RECV
        * CLOSED
* EXPRESSION：
    * dport=
    * sport=
* 经常使用组合：
    * -tan , -tanl, -tanlp , -uan

常见用法
* ss -l 显示本地打开的全部端口
* ss -pl 显示每一个进程具体打开的socket
* ss -t -a 显示全部TCP socket
* ss -u -a显示全部的UDP socket
* ss -o state established ‘( dport = :ssh or sport = :ssh )’ 显示全部已创建的ssh链接
* ss -o state established ‘( sport = :http or sport = :http )’ 显示全部已创建的HTTP链接
* ss -s 列出当前socket详细信息

**网络配置文件**
* IP、MASK、GW、DNS相关配置文件：/etc/sysconfig/network-scripts/ifcfg-IFACE
* 路由相关的配置文件：/etc/sysconfig/network-scriptes/route-IFACE
* /etc/sysconfig/network-scripts/ifcfg-IFACE：
    * DEVICE：此配置文件应用到的设备
    * HWADDR：对应的设备的MAC地址
    * BOOTRPROTO：激活此设备时使用的地址配置协议，经常使用的dhcp，static，none，bootp
    * NM_CONTROLLED：NM时NetworkManager的缩写，此网卡是否接受NM控制；建议Centos6为“no”
    * ONBOOT：在系统引导时是否激活此设备
    * TYEP：接口类型；常见的有Ethernet，Bridge
    * UUID：设备的唯一标识
    * IPADDR：指明IP地址
    * NETMASK：子网掩码
    * GATEWAY：默认网关
    * DNS1:第一个DNS服务器指向
    * DNS2:第二个DNS服务器指向
    * USERCTL：普通用户是否可控制此设备
    * REEPDNS：若是BOOTPROTO的值为“dhcp”，YES将容许dhcp server分配的DNS服务器信息直接覆盖至/etc/resolv.conf文件，NO不容许修改/etc/resolv.conf
* 设备配置被保存在文本文件中
    * /etc/sysconfig/network-scripts/ifcfg-<name>
    * 帮助文档列出完整选项列表：/usr/share/doc/initcripts-*/sysconfig.txt

**nmcli命令**
* 地址配置工具：nmcli
* nmcli [OPTIONS] OBJECT {COMMAND | help }
    * device - show and manage network interfaces
    * nmcli  device help 
    * connection - start, stop, and manage network connections
    * nmcli connection help
* 修改IP地址等属性：
    * nmcli connection modify IFACE [+|-] setting.property value
        * setting property:
            * ipv4.address
            * ipv4.geteway
            * ipv4.dns1
            * ipv4.method manual | auto
* 修改配置文件执行生效：systemctl restart network       |           nmcli con reload
* nmcli 命令生效：nmcli con down eth0；nmcli con up eth0
* NetworkManager 是管理和监控网络设置的守护进程
* 设备即网络接口，链接是对网络接口的配置，一个网络接口可有多个链接配置，但同时只有一个链接配置生效
* 显示全部包括不活动的链接
    * nmcli con show
* 显示全部活动链接
    * nmcli con show —active
* 显示网络链接配置
    * nmcli con show “System eth0"
* 显示设备状态
    * nmcli dev status
* 显示网络接口属性
    * nmcli dev show eth0
* 建立新链接default，IP自动经过dhcp获取
    * nmcli con add con-name default type Ethernet ifname eth0
* 删除链接
    * nmcli con del default
* 建立新链接static，指定静态IP，不自动链接
    * nmcli con add con-name static ifname eth0 autoconnect no type ethernet ipv4.address 192.168.x.10/24 ipv4.gateway 192.168.x.254

使用nmcli配置网络
* 启动static链接配置
    * nmcli con up static
* 启动default链接配置
    * nmcli con up default
* 查看帮助
    * nmcli con add help
* 修改链接设置
    * nmcli con mod “static” connection.autoconnect no
    * nmcli con mod “static” ipv4.dns 192.168.x.254
    * nmcli con mod “static” +ipv4.dns 8.8.8.8
    * nmcli con mod “static” -ipv4.dns 8.8.8.8
    * nmcli con mod “static” ipv4.address “192.168.x.10/24 192.168.x.254"
    * nmcli con mod “static” +ipv4.address 10.10.10.10/14
* DNS设置，存放在/etc/resolv.conf文件中
    * PEERDNS=no表示当IP经过dhcp自动获取时，dns还是手动设置，不自动获取
    * 等价下面的命令：
        * nmcli con mod “System eth0” ipv4.ignore-auto-dns yes
* 修改配置链接后，须要从新加载配置
    * nmcli con reload
    * nmcli con down “System eth0”    可被自动激活
    * nmcli con up “System eth0” 
    * nmcli dev dis eth0                        禁用网卡，防止被自动激活
* 图形工具
    * nm-connection-editor
* 字符工具
    * nmtui
    * nmtui-connect
    * nmtui-edit
    * nmtui-hostname

**nmcli实现bonding  **     
bonding的做用：
可将多块网卡绑定同一个IP地址对外提供服务；可实现高可用或者负载均衡
* 添加bonding接口
    * nmcli con add con-name mybond0 type bond ifname bond0 mode active-backup
* 添加从属接口
    * nmcli con add type bond-slave ifname ens33 master bond0
    * nmcli con add type bond-slave ifname ens34 master bond0
        * 注意：无需为从属接口提供链接名，则该名称是接口名称加类型构成
* 要启动绑定，则必须首先启动从属接口
    * nmcli con up bond-slave-ens33
    * nmcli con up bond-slave-ens34
* 启动绑定
    * nmcli con up mybond0
* 配置IP地址
    * nmcli con mod mybond0 ipv4.address 192.168.1.x/24 ipv4.gateway 192.168.1.254 ipv4.method manual
* 查看bonding状态
    * cat /proc/net/bonding/bond0
* 删除bonding绑定
    * 关闭bonding
        * nmcli con down mybond0
    * 删除bonding
        * nmcli con delete mybond0
    * 删除从属接口
        * nmcli con delete bond-slave-ens33
        * nmcli con delete bond-slave-ens34

**网络组Network Teaming**
网络组：是将多个网卡聚合在一块儿，从而实现容错和提升吞吐量
网络组不一样于旧版中bonding技术，提供更好的性能和扩展性
网络组由内核驱动和teamd守护进程实现
runner多种方式：broadcast, roundrobin, activebackup, loadbalance, lacp

网络组
* 启动网络组接口不会自动启动网络组中的port接口
* 启动网络组接口中的port接口总会自动启动网络组接口
* 禁用网络组接口会自动禁用网络组中的port接口
* 没有port接口的网络组接口能够启动静态IP链接
* 启用DHCP链接时，没有port接口的网络组会等待port接口的加入

建立网络组接口
* nmcli con add con-name CNAME type team ifname IFNAME [config JSON]
    * CNAME：链接名
    * IFNAME：接口名
    * JSON指定runner方式
        * 格式：’{“runner”:{“name”:”METHOD}}'
            * METHOD
                * broadcast
                * roundrobin
                * activebackup
                * loadbalance
                * lacp

建立port接口
* nmcli con add con-name CNAME type team-slave ifname IFNAME master TEAM
    * CNAME：链接名
    * IFNAME：网络接口名
    * TEAM：网络组接口名
* 链接名若不指定，默认为team-slave-IFACE
* nmcli dev dis IFNAME
* nmcli con up CNAME
    * IFNAME：设备名
    * CNAME：网络组接口名或port接口

网络组示例：
* nmcli con add con-name myteam0 type team ifname team0 config ‘{“runner”:{“name”:”loadbalance"}}’ ipv4.address 192.168.1.100/24 ipv4.method manual
* nmcli con add con-name team0-eth1 type team-slave ifname eth1 master team0
* nmcli con add con-name team0-eth2 type team-slave ifname eth1 master team0
* nmcli con up myteam0
* nmcli con up team0-eth1
* nmcli con up team0-eth2
* teamdctl team0 state
* nmcli dev dis eth1
删除网络组
* nmcli con down team0
* teamdctl team0 state
* nmcli con show
* nmcli con del team0-eth0
* nmcli con del team0-eth1
* nmcli con show
相关文章
相关标签/搜索
每日一句
    每一个你不满意的现在，都有一个你没有努力的曾经。
本站公众号
   欢迎关注本站公众号,获取更多信息
联系我们 最近搜索 最新文章 沪ICP备13005482号-10 MyBatis教程 SQL 教程 MySQL教程 Java 教程 Thymeleaf 教程 Hibernate教程 Spring教程 Redis教程