Linux網絡管理

一、Linux網絡配置方式

Linux網絡配置有兩種方式, 如下:

  • 靜態指定:
    • 命令: ifconfig, route, ip, ss, ...
    • 配置文件
    • 圖形工具: CentOS 6(system-config-network-tui, setup); CentOS 7(nmtui)
  • 動態分配: DHCP(Dynamic Host Configuration Protocol)

二、網路配置命令

2.1 ifconfig命令

用法1: ifconfig [interface]

# ifconfig [-a]: 顯示所有網絡接口詳細信息, 不加“-a”也可以
[root@zabbix ~]# ifconfig 
docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.17.0.1  netmask 255.255.0.0  broadcast 0.0.0.0
        ether 02:42:84:6c:65:e2  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

eno16777736: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.123.132  netmask 255.255.255.0  broadcast 192.168.123.255
        inet6 fe80::20c:29ff:fe7b:f986  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:7b:f9:86  txqueuelen 1000  (Ethernet)
        RX packets 225  bytes 25331 (24.7 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 254  bytes 82633 (80.6 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 0  (Local Loopback)
        RX packets 12028  bytes 2818167 (2.6 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 12028  bytes 2818167 (2.6 MiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

# ifconfig IFACE: 顯示指定網絡接口詳細信息
[root@zabbix ~]# ifconfig docker0
docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500
        inet 172.17.0.1  netmask 255.255.0.0  broadcast 0.0.0.0
        ether 02:42:84:6c:65:e2  txqueuelen 0  (Ethernet)
        RX packets 0  bytes 0 (0.0 B)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 0  bytes 0 (0.0 B)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

用法2: ifconfig interface [aftype] options | address ...

# ifconfig IFACE ip[/mask] [up]: 設置一個網絡接口, up(默認)爲啓用;
# ifconfig IFACE IP netmask MASK [up]: 同上
[root@zabbix ~]# ifconfig eno16777736:0 192.168.123.133 up
[root@zabbix ~]# ifconfig eno16777736:0
eno16777736:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.123.133  netmask 255.255.255.0  broadcast 192.168.123.255
        ether 00:0c:29:7b:f9:86  txqueuelen 1000  (Ethernet)

Note: 以上配置方式爲立即生效.

2.2 route命令

route命令用於進行路由管理.

查看當前內核路由表

用法: route -n

[root@zabbix ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG    100    0        0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.29.2.0      192.168.123.2   255.255.255.0   UG    100    0        0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U     100    0        0 eno16777736

添加路由

用法: route add [-net|-host] target [netmask Nm] [gw GW] [[dev] IFACE]

# 添加一條主機路由 目標爲172.29.2.43, 網關爲192.168.123.2;
[root@zabbix ~]# route add -host 172.29.2.43 gw 192.168.123.2 dev eno16777736
[root@zabbix ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG    100    0        0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.29.2.43     192.168.123.2   255.255.255.255 UGH   0      0        0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U     100    0        0 eno16777736

# 添加一條網絡路由, 目標爲172.29.0.0; 網關爲192.168.123.2
root@zabbix ~]# route add -net 172.29.0.0 netmask 255.255.0.0 gw 192.168.123.2 dev eno16777736
[root@zabbix ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG    100    0        0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.29.0.0      192.168.123.2   255.255.0.0     UG    0      0        0 eno16777736
172.29.2.43     192.168.123.2   255.255.255.255 UGH   0      0        0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U     100    0        0 eno16777736

# 添加一條默認路由, 網關爲192.168.123.2; 以下兩種方式都可以.
[root@zabbix ~]# route add -net 0.0.0.0 netmask 0.0.0.0 gw 192.168.123.2
[root@zabbix ~]# route add default gw 192.168.123.2

刪除路由

用法: route del [-net|-host] target [netmask Nm] [gw GW] [[dev] IFACE]

# 刪除一條主機路由
[root@zabbix ~]# route del -host 172.29.2.43
[root@zabbix ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG    100    0        0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
172.29.0.0      192.168.123.2   255.255.0.0     UG    0      0        0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U     100    0        0 eno16777736

# 刪除一條網絡路由
[root@zabbix ~]# route del -net 172.29.0.0 netmask 255.255.0.0
[root@zabbix ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG    100    0        0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U     0      0        0 docker0
192.168.123.0   0.0.0.0         255.255.255.0   U     100    0        0 eno16777736

Note: 使用命令的方式配置的路由條目會立即生效, 但不會永久有效, 當重啓網卡或者重啓主機就會失效.

2.3 DNS解析命令

DNS配置文件: /etc/resolv.conf

nameserver DNS_SERVER_IP1
nameserver DNS_SERVER_IP2
nameserver DNS_SERVER_IP3

dns正向解析: FQDN(Fully Qualified Domain Name, 完全限定域名) --> IP

# dig -t A FQDN
# host -t A FQDN

dns反向解析: IP --> FQDN

# dig -x IP
# host -t PTR IP

2.4 網絡連接查看命令 - netstat

netstat用於顯示網絡連接狀態, 內核路由表, 接口統計, 僞裝連接和組播成員.

顯示網絡連接

用法: netstat [--tcp|-t] [--udp|-u] [--raw|-w] [--listening|-l] [--all|-a] [--numeric|-n] [--extend|-e[--extend|-e] [--program|-p]

# -t: tcp協議相關
# -u: udp協議相關
# -r: raw socket相關
# -l: 處於監聽狀態
# -a: 所有狀態
# -n: 以數字顯示IP和端口
# -e: 擴展格式
# -p: 顯示相關進程及PID

# 以數字格式顯示所有tcp相關連接
[root@zabbix ~]# netstat -tan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN     
...

# 以數字格式顯示所有udp相關連接
[root@zabbix ~]# netstat -uan
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
udp        0      0 0.0.0.0:6842            0.0.0.0:*                          
udp        0      0 0.0.0.0:68              0.0.0.0:*                          
udp        0      0 127.0.0.1:323           0.0.0.0:*                          
udp6       0      0 ::1:323                 :::*                               
udp6       0      0 :::34427                :::*                       

# 以數字格式顯示所有處於監聽狀態的tcp連接
[root@zabbix ~]# netstat -tnl
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State      
tcp        0      0 0.0.0.0:3306            0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     
tcp        0      0 127.0.0.1:25            0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:10050           0.0.0.0:*               LISTEN     
tcp        0      0 0.0.0.0:10051           0.0.0.0:*               LISTEN     
tcp6       0      0 :::80                   :::*                    LISTEN     
tcp6       0      0 :::22                   :::*                    LISTEN     
tcp6       0      0 ::1:25                  :::*                    LISTEN     
tcp6       0      0 :::10050                :::*                    LISTEN     
tcp6       0      0 :::10051                :::*                    LISTEN     

# 以數字格式顯示所有處於監聽狀態udp連接: netstat -unl

# 以數字格式顯示所有處於監聽狀態的tcp連接, 並顯示相關進程及pid: netstat -tnlp

# 以數字格式顯示所有出去監聽狀態的udp連接, 並顯示相關進程和pid: netstat -unlp

顯示內核路由表

用法: netstat {--route|-r} [--extend|-e[--extend|-e]] [--verbose|-v] [--numeric|-n]

# -r: 顯示內核路由表
[root@zabbix ~]# netstat -r
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
default         gateway         0.0.0.0         UG        0 0          0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U         0 0          0 docker0
172.29.2.0      gateway         255.255.255.0   UG        0 0          0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U         0 0          0 eno16777736

# -n: 以數字格式顯示
[root@zabbix ~]# netstat -rn
Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
0.0.0.0         192.168.123.2   0.0.0.0         UG        0 0          0 eno16777736
172.17.0.0      0.0.0.0         255.255.0.0     U         0 0          0 docker0
172.29.2.0      192.168.123.2   255.255.255.0   UG        0 0          0 eno16777736
192.168.123.0   0.0.0.0         255.255.255.0   U         0 0          0 eno16777736

接口統計數據

用法: netstat {--interfaces|-I|-i} [--all|-a] [--extend|-e] [--program|-p] [--numeric|-n]

# -I<IFACE>: 顯示指定接口
[root@zabbix ~]# netstat -Idocker0
Kernel Interface table
Iface      MTU    RX-OK RX-ERR RX-DRP RX-OVR    TX-OK TX-ERR TX-DRP TX-OVR Flg
docker0   1500        0      0      0 0             0      0      0      0 BMU

# -i: 顯示所有網絡接口
[root@zabbix ~]# netstat -i
Kernel Interface table
Iface      MTU    RX-OK RX-ERR RX-DRP RX-OVR    TX-OK TX-ERR TX-DRP TX-OVR Flg
docker0   1500        0      0      0 0             0      0      0      0 BMU
eno16777  1500    21658      0      0 0          4968      0      0      0 BMRU
lo       65536   130925      0      0 0        130925      0      0      0 LRU

2.5 路由信息(包括策略路由)、網絡設備和ip隧道管理命令 - ip

用法: ip [ OPTIONS ] OBJECT { COMMAND | help }

OBJECT: { link | addr | route }
OPTIONS: { -V[ersion] | -s[tatistics] | -r[esolve] | -f[amily] { inet | inet6 | ipx | dnet | link } | -o[neline] | -n[etns] name }

網絡接口信息查看

用法: ip link show

# 顯示所有接口信息: ip link show
[root@zabbix ~]# ip link show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
    link/ether 00:0c:29:7b:f9:86 brd ff:ff:ff:ff:ff:ff
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT 
    link/ether 02:42:48:10:bd:c5 brd ff:ff:ff:ff:ff:ff

# 查看指定接口新: ip link show dev IFACE
[root@zabbix ~]# ip link show dev docker0
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT 
    link/ether 02:42:48:10:bd:c5 brd ff:ff:ff:ff:ff:ff

# 查看所有已激活接口的信息: ip link show up
[root@zabbix ~]# ip link show up
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
    link/ether 00:0c:29:7b:f9:86 brd ff:ff:ff:ff:ff:ff
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT 
    link/ether 02:42:48:10:bd:c5 brd ff:ff:ff:ff:ff:ff

網絡接口狀態設置

用法: ip link set

# 激活或禁用某個接口: ip link set dev IFACE up|down
[root@zabbix ~]# ip link set dev docker0 down
[root@zabbix ~]# ip link show up
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
    link/ether 00:0c:29:7b:f9:86 brd ff:ff:ff:ff:ff:ff

ip地址管理

用法: ip addr

# ip地址的添加或移除: ip addr <add|del> IP_ADDRESS/MASK dev IFACE
    # [label 'LABEL']: 添加地址時指明網卡標籤
    # [scope {global|link|host}]: 指明作用域
        # global: 全局有效
        # link: 僅鏈接有用
        # host: 僅本機可用
    # [broadcast ADDRESS]: 指明廣播域
# 添加一個新地址
[root@zabbix ~]# ip addr add 192.168.123.101/24 dev eno16777736:0
[root@zabbix ~]# ip addr show eno16777736
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:0c:29:7b:f9:86 brd ff:ff:ff:ff:ff:ff
    inet 192.168.123.132/24 brd 192.168.123.255 scope global dynamic eno16777736
       valid_lft 1685sec preferred_lft 1685sec
    inet 192.168.123.101/24 scope global secondary eno16777736 # 新添加的地址
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe7b:f986/64 scope link 
       valid_lft forever preferred_lft forever

# 移除
[root@zabbix ~]# ip addr del 192.168.123.101/24 dev eno16777736:0 # 刪除
[root@zabbix ~]# ip addr show dev eno16777736
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:0c:29:7b:f9:86 brd ff:ff:ff:ff:ff:ff
inet 192.168.123.132/24 brd 192.168.123.255 scope global dynamic eno16777736
   valid_lft 1486sec preferred_lft 1486sec
inet6 fe80::20c:29ff:fe7b:f986/64 scope link 
   valid_lft forever preferred_lft forever

# 指定一個標籤
[root@zabbix ~]# ip addr add 192.168.123.100/24 dev eno16777736 label 'eno16777736:0'
[root@zabbix ~]# ifconfig eno16777736:0
eno16777736:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
    inet 192.168.123.100  netmask 255.255.255.0  broadcast 0.0.0.0
    ether 00:0c:29:7b:f9:86  txqueuelen 1000  (Ethernet)

[root@zabbix ~]# ip addr del 192.168.123.100/24 dev eno16777736 label 'eno16777736:0'

# 查詢協議地址: ip add show
    # [dev IFACE]
    # [label 'LABEL']
    # [primary and secondary]
[root@zabbix ~]# ip add show dev docker0
3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN 
    link/ether 02:42:91:38:6b:00 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 scope global docker0
       valid_lft forever preferred_lft forever

# 清空協議地址: ip add flush
[root@zabbix ~]# ip addr flush dev eno16777736 label 'eno16777736:0'

路由管理

# 添加路由: ip route add TARGET via GW dev IFACE [src SOURCE_IP]
    # 主機路由: IP
    # 網絡路由: IP/MASK
[root@zabbix ~]# ip route add to 172.29.2.43 via  192.168.123.2 dev eno16777736 # 主機路由不用指定掩碼, 默認爲32
[root@zabbix ~]# ip route add 172.29.0.0/16 via 192.168.123.2
[root@zabbix ~]# ip route add default via 192.168.123.2 # 添加默認網關

# 顯示內核路由表: ip route show
[root@zabbix ~]# ip route show
default via 192.168.123.2 dev eno16777736  proto static  metric 100 
172.17.0.0/16 dev docker0  proto kernel  scope link  src 172.17.0.1 
172.29.0.0/16 via 192.168.123.2 dev eno16777736 
172.29.2.43 via 192.168.123.2 dev eno16777736 
192.168.123.0/24 dev eno16777736  proto kernel  scope link  src 192.168.123.132  metric 100

#刪除路由: ip route del TARGET
[root@zabbix ~]# ip route del 172.29.2.43
[root@zabbix ~]# ip route del 172.29.0.0/16
[root@zabbix ~]# ip route del default
[root@zabbix ~]# ip route show
default via 192.168.123.2 dev eno16777736  proto static  metric 100 
172.17.0.0/16 dev docker0  proto kernel  scope link  src 172.17.0.1 
192.168.123.0/24 dev eno16777736  proto kernel  scope link  src 192.168.123.132  metric 100 

# 清空路由表: ip route flush
    # [dev IFACE]
    # [via PREFIX]
[root@zabbix ~]# ip route flush dev eno16777736
[root@zabbix ~]# ip route show
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1

Note: 以上方式添加或刪除的路由立即生效, 重啓系統或者network服務後失效.

2.6 網絡套接字接口查看工具

用法: ss [options] [FILTER]

# [options]:
    # -t: tcp協議相關
    # -u: udp協議相關
    # -w: 裸套接字相關
    # -x: unix sock相關
    # -l: listen狀態的連接
    # -a: 所有狀態
    # -n: 數字格式
    # -p: 相關的程序及pid
    # -e: 擴展的信息
    # -m: 內存用量
    # -o: 計時器信息

# [FILTER]:
    # FILETER: [state TCP-STATE] [EXPRESSION]
        # TCP-STATE: established, syn-sent, syn-recv, fin-wait-1, fin-wait-2, time-wait, closed, close-wait, last-ack, listen and closing.
        # EXPRESSION: dport =; sport =; 示例: '( dport = :ssh or sport = :ssh )'

# 以數字格式顯示所有tcp相關連接: ss -tan
[root@zabbix ~]# ss -tan
State      Recv-Q Send-Q                  Local Address:Port                                 Peer Address:Port              
LISTEN     0      50                                  *:3306                                            *:*                  
LISTEN     0      128                                 *:22                                              *:*                  
LISTEN     0      100                         127.0.0.1:25                                              *:*                  
LISTEN     0      128                                 *:10050                                           *:*                  
LISTEN     0      128                                 *:10051                                           *:*                  
ESTAB      0      0                     192.168.123.132:46052                             192.168.123.132:3306               
...

# 常用組合: -tan, -tanl, =tanlp, -uan

# 通過FILTER過濾
[root@zabbix ~]# ss -tan state established '( sport = 3306 )' 
Recv-Q Send-Q                            Local Address:Port                                           Peer Address:Port              
0      0                               192.168.123.132:3306                                        192.168.123.132:40527              
0      0                               192.168.123.132:3306                                        192.168.123.132:40526              
0      0                               192.168.123.132:3306                                        192.168.123.132:40539              
0      0                               192.168.123.132:3306                                        192.168.123.132:40528              
0      0                               192.168.123.132:3306                                        192.168.123.132:40537              
0      0                               192.168.123.132:3306                                        192.168.123.132:40545              
0      0                               192.168.123.132:3306                                        192.168.123.132:40533              
0      0                               192.168.123.132:3306                                        192.168.123.132:40538              
0      0                               192.168.123.132:3306                                        192.168.123.132:40534              
0      0                               192.168.123.132:3306                                        192.168.123.132:40531              
0      0                               192.168.123.132:3306                                        192.168.123.132:40541              
0      0                               192.168.123.132:3306                                        192.168.123.132:40530              
0      0                               192.168.123.132:3306                                        192.168.123.132:40529              
0      0                               192.168.123.132:3306                                        192.168.123.132:40544              
0      0                               192.168.123.132:3306                                        192.168.123.132:40542              
0      0                               192.168.123.132:3306                                        192.168.123.132:40535              
0      0                               192.168.123.132:3306                                        192.168.123.132:40543              
0      0                               192.168.123.132:3306                                        192.168.123.132:40540              
0      0                               192.168.123.132:3306                                        192.168.123.132:40546              
0      0                               192.168.123.132:3306                                        192.168.123.132:40532              
0      0                               192.168.123.132:3306                                        192.168.123.132:40536              
0      0                               192.168.123.132:3306                                        192.168.123.132:40596              
0      0                               192.168.123.132:3306                                        192.168.123.132:40547

2.7 修改網絡配置文件

IP, MASK, GW, DNS相關配置文件: /etc/sysconfig/network-scripts/ifcfg-IFACE

DEVICE="IFACE": 此配置文件應用到的設備
HWADDR="MAC_ADDRESS": 對應設備的mac地址
BOOTPROTO=="static|dhcp|none|bootp": 激活此設備時使用的地址配置協議
NM_CONTROLLED="yes|no": NM是NetworkManager的簡寫, 此網卡是否接受NM控制, CentOS簡寫爲“no”
ONBOOT="yes|no": 在系統引導時是否激活此設備
TYPE="Ethernet|Bridge": 接口類型
UUID="uuid": 設備的唯一標識
IPADDR="IP_ADDRESS": 指明IP地址
NETMASK="MASK": 子網掩碼
GATEWAY="gateway": 默認網關
DNS1="DNS_SERVER_IP1": 第一個DNS服務器
DNS2="DNS_SERVER_IP2":
DNS3="DNS_SERVER_IP3":
USERCTL="yes|no": 普通用戶是否可控制此設備
PEERDNS="yes|no": 如果BOOTPROTO的值爲“dhcp”, 是否允許dhcp server分配的dns服務器指向信息直接覆蓋至/etc/resolv.conf文件中

Note: 通過網絡配置文件給網卡配置多地址, ifcfg-IFACE_ALIAS中DEVICE="IFACE_ALIAS", 網卡別名不用使用DHCP引導.

路由相關配置文件: /etc/sysconfig/network-scripts/route-IFACE

# 兩種方式:
# 1. TARGET via GW
[root@zabbix network-scripts]# vim route-eno16777736
172.29.0.0/16 via 192.168.123.2

2. 每三行定義一條路由
# ADDRESS#(#號表示數字, 表示第幾組路由)=TARGET
# NETMASK#=mask
# GATEWAY#=GW
[root@zabbix network-scripts]# vim route-eno16777736 
ADDRESS0=172.29.2.0
NETMASK0=255.255.255.0
GATEWAY0=192.168.123.2
發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章