云計(jì)算學(xué)習(xí)路線教程大綱課件：網(wǎng)絡(luò)管理基礎(chǔ)
====================================================================================
Network interface names
Traditionally, network interfaces in Linux are enumerated as eth0, eth2, eth3, and so on. However, the mechanism which
sets these names can cause changes to which interface gets which name as devices are added and removed.
The default naming behavior in Red Hat Enterprise Linux 7 is to assign fixed names based on firmware, device topology,
and device type.
Interface names have the following characters:
Ethernet interfaces begin with en, WLAN interfaces begin with wl, and WWAN interfaces begin with ww.
The next character(s) represents the type of adapter with an o for on-board, s for hotplug slot, and p for PCI geographic location.
Not used by default but also available to administrators, an x is used to incorporate a MAC address.
Finally, a number N is used to represent an index, ID, or port.
If the fixed name cannot be determined, the traditional names such as ethN will be used.
For example, the first embedded network interface may be named eno1 and a PCI card network interface may be named enp2s0.
The new names make it easier to distinguish the relationship between a port and its name if the user knows both, but the
trade off is that users cannot assume a system with one interface calls that interface eth0.
使用NetworkManager管理網(wǎng)絡(luò)
網(wǎng)絡(luò)管理器（NetworkManager）是一個(gè)動(dòng)態(tài)網(wǎng)絡(luò)的控制器與配置系統(tǒng)，它用于當(dāng)網(wǎng)絡(luò)設(shè)備可用時(shí)保持設(shè)備和連接開啟并激活
默認(rèn)情況下，CentOS/RHEL 7 已安裝網(wǎng)絡(luò)管理器，并處于啟用狀態(tài)。
device 設(shè)備，物理設(shè)備 例如enp2s0,virbr0,team0
connection 連接，邏輯設(shè)置 指的是一套具體配置方案
多個(gè)connection可以應(yīng)用到同一個(gè)device，但同一時(shí)間只能啟用其中一個(gè)connection。
這樣的好處是針對(duì)一個(gè)網(wǎng)絡(luò)接口，可以設(shè)置多個(gè)網(wǎng)絡(luò)連接，比如靜態(tài)IP和動(dòng)態(tài)IP，再根據(jù)需要up相應(yīng)的connection
NetworkManager提供的工具
nmcli, nmtui, nm-connect-editor
[root@tianyun ~]# nmcli connection add con-name enp2s0-auto autoconnect yes ifname enp2s0 type ethernet
[root@tianyun ~]# nmcli connection add con-name enp2s0-gun autoconnect yes ifname enp2s0 type ethernet ip4 10.10.10.10/24 gw4 10.10.10.254
[root@tianyun ~]# nmcli connection show enp2s0-auto |grep ipv4.me
ipv4.method: auto
[root@tianyun ~]# nmcli connection show enp2s0-gun |grep ipv4.me
ipv4.method: manual
[root@tianyun ~]# ls /etc/sysconfig/network-s/
ifcfg-enp2s0 ifdown-ippp ifdown-TeamPort ifup-ipv6 ifup-Team
ifcfg-enp2s0-auto ifdown-ipv6 ifdown-tunnel ifup-isdn ifup-TeamPort
ifcfg-enp2s0-gun ifdown-isdn ifup ifup-plip ifup-tunnel
[root@tianyun ~]# nmcli connection up enp2s0-auto
[root@tianyun ~]# nmcli connection delete enp2s0-auto
[root@tianyun ~]# nmcli connection modify enp2s0-gun ipv4.method a
[root@tianyun ~]# nmcli connection modify enp2s0-gun ipv4.method m
[root@tianyun ~]# nmcli connection modify enp2s0-gun +ipv4.addresses 20.20.20.20/24
[root@tianyun ~]# nmcli connection modify enp2s0-gun +ipv4.dns 114.114.114.114
[root@tianyun ~]# nmcli connection show enp2s0-gun |grep ipv4.add
ipv4.addresses: 10.10.10.10/24, 20.20.20.20/24
[root@tianyun ~]# vim /etc/sysconfig/network-s/ifcfg-enp2s0
NAME="enp2s0"
DEVICE="enp2s0"
ONBOOT=yes
NETBOOT=yes
BOOTPROTO=none
IPADDR=172.16.120.246
PREFIX=24
IPADDR1=192.168.200.246
PREFIX1=24
GATEWAY=172.16.120.254
DNS1=8.8.8.8
DNS2=114.114.114.114
[root@tianyun ~]# nmcli con reload
[root@tianyun ~]# nmcli con down enp2s0; nmcli con up enp2s0
注：刪除自建的連接connection
不使用NetworkManager管理網(wǎng)絡(luò)
aliyun
[root@aliyun ~]# nmcli connection delete enp2s0-auto
[root@aliyun ~]# systemctl disable NetworkManager
[root@aliyun ~]# systemctl stop NetworkManager
[root@aliyun ~]# systemctl status NetworkManager
● NetworkManager.service - Network Manager
Loaded: loaded (/usr/lib/systemd/system/NetworkManager.service; disabled; vendor preset: enabled)
Active: inactive (dead)
[root@aliyun ~]# vim /etc/sysconfig/network-s/ifcfg-eth0
NAME=eth0
DEVICE=eth0
ONBOOT=yes
NETBOOT=yes
BOOTPROTO=none
IPADDR=192.168.122.169
PREFIX=24
TYPE=Ethernet
[root@aliyun ~]# systemctl restart network.service
以下配置跟NetworkManager無關(guān)：
a. hosts
[root@tianyun ~]# cat /etc/hosts
127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4
::1 localhost localhost.localdomain localhost6 localhost6.localdomain6
119.75.218.70 www.baidu.com
[root@tianyun ~]# getent hosts www.baidu.com
119.75.218.70 www.baidu.com
b. resolv.conf DNS
[root@tianyun ~]# cat /etc/resolv.conf
nameserver 114.114.114.114
[root@tianyun ~]# yum -y install bind-utils
[root@tianyun ~]# host www.sina.com
www.sina.com is an alias for us.sina.com.cn.
us.sina.com.cn is an alias for wwwus.sina.com.
wwwus.sina.com has address 66.102.251.33
基本的網(wǎng)絡(luò)測(cè)試工具
[root@tianyun ~]# ip a
[root@tianyun ~]# ip a s eth0
[root@tianyun ~]# ip route
[root@tianyun ~]# ip neigh
[root@tianyun ~]# hostname
[root@tianyun ~]# ping www.baidu.com
[root@tianyun ~]# ping -c2 www.baidu.com
[root@tianyun ~]# ip -s link show eth0
[root@tianyun ~]# traceroute www.sina.com
[root@tianyun ~]# tracepath www.sina.com
1?: [LOCALHOST] pmtu 1500
1: no reply
2: 11.245.87.126 0.787ms
3: 106.11.130.218 0.387ms
4: 42.120.244.125 0.425ms
5: 150.138.132.157 1.469ms
6: 150.138.128.241 3.546ms asymm 7
7: 202.97.40.241 24.677ms
8: 202.97.24.154 14.197ms
9: 202.97.33.154 18.340ms asymm 10
10: 202.97.90.242 182.632ms
11: 203.14.186.138 193.383ms asymm 13
12: 218.30.41.234 209.543ms asymm 13
13: 66.102.251.33 163.224ms reached
Resume: pmtu 1500 hops 13 back 14
查看設(shè)備物理連接的狀態(tài)
[root@tianyun ~]# ip a
2: enp1s0:
如果在連接禁用 ONBOOT=no 以上的信息不真實(shí)
[root@tianyun ~]# ethtool enp1s0
Link detected: no
ports and services
以下為示例服務(wù)：
[root@aliyun ~]# yum -y install httpd vsftpd
[root@aliyun ~]# systemctl start httpd
[root@aliyun ~]# systemctl start vsftpd
http 80/tcp
https 443/tcp
ssh 22/tcp
ftp 21/tcp
[root@aliyun ~]# ss -tnl
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 :80:*
LISTEN 0 128 :8080:*
LISTEN 0 10 114.215.71.214:53 :
LISTEN 0 10 10.29.89.165:53 :
LISTEN 0 10 127.0.0.1:53 :
LISTEN 0 128 :22:*
LISTEN 0 128 127.0.0.1:953 :
LISTEN 0 128 127.0.0.1:6010 :
LISTEN 0 128 :443:*
LISTEN 0 32 :::21 :::*
LISTEN 0 10 :::53 :::*
[root@aliyun ~]# ss -tnl |grep :80
LISTEN 0 128 :80:*
[root@aliyun ~]# ss -tnl |grep :21
LISTEN 0 32 :::21 :::*
[root@aliyun ~]# ss -atn
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 :80:*
LISTEN 0 10 114.215.71.214:53 :
LISTEN 0 10 10.29.89.165:53 :
LISTEN 0 10 127.0.0.1:53 :
LISTEN 0 128 :22:*
LISTEN 0 128 127.0.0.1:953 :
LISTEN 0 128 127.0.0.1:6010 :
ESTAB 0 52 114.215.71.214:22 123.120.38.233:49603
ESTAB 0 0 114.215.71.214:40962 140.205.140.205:80
LISTEN 0 32 :::21 :::*
LISTEN 0 10 :::53 :::*
[root@aliyun ~]# ss -atn |grep :22
LISTEN 0 128 :22:*
ESTAB 0 52 114.215.71.214:22 123.120.38.233:49603
[root@aliyun ~]# ss -atn |grep :80
LISTEN 0 128 :80:*
ESTAB 0 0 114.215.71.214:40962 140.205.140.205:80
a 所有狀態(tài)，包括 LISTEN
[alice@tianyun ~]$ ss -anu
State Recv-Q Send-Q Local Address:Port Peer Address:Port
UNCONN 0 0 114.215.71.214:53 :
UNCONN 0 0 10.29.89.165:53 :
UNCONN 0 0 127.0.0.1:53 :
UNCONN 0 0 114.215.71.214:123 :
UNCONN 0 0 10.29.89.165:123 :
UNCONN 0 0 127.0.0.1:123 :
UNCONN 0 0 :123:*
UNCONN 0 0 :::53 :::*
UNCONN 0 0 :::123 :::*
[kiosk@foundation0 ~]$ ss -tan |grep :5910
LISTEN 0 5 :5910:*
ESTAB 0 0 172.25.254.250:5910 172.25.254.44:51435
ESTAB 0 0 172.25.254.250:5910 172.25.254.6:40546
ESTAB 0 0 172.25.254.250:5910 172.25.254.18:37780
ESTAB 0 0 172.25.254.250:5910 172.25.254.13:55841
ESTAB 0 0 172.25.254.250:5910 172.25.254.35:36984
ESTAB 0 0 172.25.254.250:5910 172.25.254.9:47342
ESTAB 0 0 172.25.254.250:5910 172.25.254.2:40955
ESTAB 0 0 172.25.254.250:5910 172.25.254.12:50833
ESTAB 0 0 172.25.254.250:5910 172.25.254.36:50854
ESTAB 0 0 172.25.254.250:5910 172.25.254.1:52444
ESTAB 0 0 172.25.254.250:5910 172.25.254.47:39335
ESTAB 10 0 172.25.254.250:5910 172.25.254.14:55833
臨時(shí)配置網(wǎng)絡(luò)信息
ip/netmask
gateway
hostname
配置文件：
#vim /etc/sysconfig/network-s/ifcfg-eth0
DEVICE=eth0 設(shè)備名稱
【NAME="System eth0" 設(shè)備名稱】 可以不存在
BOOTPROTO=none 啟動(dòng)協(xié)議 獲取ip地址的方式 static、none ==>靜態(tài)獲取 dhcp 動(dòng)態(tài)
NM_CONTROLLED=no 默認(rèn)是yes 關(guān)閉network-manager
ONBOOT=yes 開機(jī)啟動(dòng)
TYPE=Ethernet 以太網(wǎng)類型
HWADDR=00:0c:29:8e:a5:d3 mac地址
IPADDR=172.16.80.252 ip地址
NETMASK=255.255.0.0 掩碼
PREFIX =24
NETWORK=172.16.0.0
GATEWAY=172.16.80.1 網(wǎng)關(guān)
dns domain name server 域名解析
幫助文檔：
#vim /usr/share/doc/inits-9.03.38/sysconfig.txt
網(wǎng)關(guān)：網(wǎng)絡(luò)的關(guān)卡(出口)，一般設(shè)置到路由器上
IP轉(zhuǎn)發(fā):
臨時(shí)
永久
net.ipv4.ip_forward = 1
dns ： 域名服務(wù)器，其中一種是解析域名到Ip地址
dns配置文件（客戶端）
#vim /etc/resolv.conf
nameserver 172.16.70.250
查看mac
#arping 172.16.70.250
掃描ip
#nmap -v -sP 172.16.70.0/24
掃描端口
#nmap -v -A 172.16.70.0/24
重啟網(wǎng)絡(luò)服務(wù):
#systemctl restart network //rhel7
#/etc/init.d/network restart //rhel5/6
#service network restart //rhel5/6
另外有需要云服務(wù)器可以了解下創(chuàng)新互聯(lián)cdcxhl.cn，海內(nèi)外云服務(wù)器15元起步，三天無理由+7*72小時(shí)售后在線，公司持有idc許可證，提供“云服務(wù)器、裸金屬服務(wù)器、高防服務(wù)器、香港服務(wù)器、美國(guó)服務(wù)器、虛擬主機(jī)、免備案服務(wù)器”等云主機(jī)租用服務(wù)以及企業(yè)上云的綜合解決方案，具有“安全穩(wěn)定、簡(jiǎn)單易用、服務(wù)可用性高、性價(jià)比高”等特點(diǎn)與優(yōu)勢(shì)，專為企業(yè)上云打造定制，能夠滿足用戶豐富、多元化的應(yīng)用場(chǎng)景需求。
重慶分公司
重慶分公司
