RHCE——管理Linux网络

网络概念

在/etc/services文件中有常用的和已经注册的端口列表

[root@desktop ~]# systemctl start NetworkManager
[root@desktop ~]# nmcli | nmtui
[root@desktop ~]# nmcli connection show 
名称                UUID                                  类型            设备   
eth0                69e0c7f5-fab0-48bb-894e-2afc2ce7b527  802-3-ethernet  eth0   
eth1                99b06102-e431-42de-bcbe-731c792c94f9  802-3-ethernet  eth1   
virbr0              30fd624b-6277-4ebf-8f43-a8dc9a94eca1  bridge          virbr0 
System eth0         5fb06bd0-0bb0-7ffb-45f1-d6edd65f3e03  802-3-ethernet  --     
Wired connection 1  e1a7b088-2e84-32aa-9e81-cd04896e08cd  802-3-ethernet  --   

验证网络配置

# 1.显示IP地址
 [student@localhost 桌面]$ ip addr show 
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
    link/ether 00:0c:29:78:cc:0c brd ff:ff:ff:ff:ff:ff
    inet 192.168.183.130/24 brd 192.168.183.255 scope global dynamic eno16777736
       valid_lft 1316sec preferred_lft 1316sec
    inet6 fe80::20c:29ff:fe78:cc0c/64 scope link 
       valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN 
    link/ether ba:f9:0f:70:f9:09 brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever

#2.显示网络性能统计

[student@localhost 桌面]$ ip -s link show eno16777736 
2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
    link/ether 00:0c:29:78:cc:0c brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast   
    6432138554 4475297  0       0       0       0      
    TX: bytes  packets  errors  dropped carrier collsns 
    10298305   49941    0       0       0       0  

#3. 显示路由器信息

[student@localhost 桌面]$ ip route 
default via 192.168.183.2 dev eno16777736  proto static  metric 1024 
192.168.122.0/24 dev virbr0  proto kernel  scope link  src 192.168.122.1 
192.168.183.0/24 dev eno16777736  proto kernel  scope link  src 192.168.183.130 

# 4.ping 

[student@localhost 桌面]$ ping www.baidu.com
PING www.a.shifen.com (61.135.169.121) 56(84) bytes of data.
64 bytes from 61.135.169.121: icmp_seq=1 ttl=128 time=31.2 ms
64 bytes from 61.135.169.121: icmp_seq=3 ttl=128 time=94.8 ms
64 bytes from 61.135.169.121: icmp_seq=4 ttl=128 time=42.4 ms
^C
--- www.a.shifen.com ping statistics ---
4 packets transmitted, 3 received, 25% packet loss, time 3004ms
rtt min/avg/max/mdev = 31.293/56.202/94.828/27.693 ms
# 5.跟踪数据包
[student@localhost 桌面]$ tracepath www.baidu.com
 1:  localhost                                             0.179ms pmtu 1500
 1:  localhost                                             0.442ms 
 1:  localhost                                             0.347ms 
 2:  no reply
# 6.端口和服务故障排除
[student@localhost 桌面]$ ss -ta
State      Recv-Q Send-Q                                         Local Address:Port                                             Peer Address:Port   
LISTEN     0      100                                                127.0.0.1:smtp                                                        *:*       
LISTEN     0      128                                                        *:34362                                                       *:*       
LISTEN     0      128                                                        *:sunrpc                                                      *:*       
LISTEN     0      5                                              192.168.122.1:domain                                                      *:*       
LISTEN     0      128                                                        *:ssh                                                         *:*       
LISTEN     0      128                                                127.0.0.1:ipp                                                         *:*       
ESTAB      0      0                                            192.168.183.130:50896                                          120.24.222.231:ssh     
LISTEN     0      100                                                      ::1:smtp                                                       :::*       
LISTEN     0      128                                                       :::sunrpc                                                     :::*       
LISTEN     0      128                                                       :::ssh                                                        :::*       
LISTEN     0      128                                                      ::1:ipp                                                        :::*       
LISTEN     0      128                                                       :::38872                                                      :::*     

使用nmcli配置网络

NatworkManager是监控和管理网络设置的守护进程
显示所有连接列表

[student@localhost 桌面]$ nmcli con show
名称         UUID                                  类型            设备        
virbr0       68150302-2b45-44f4-8f73-2392d26ec520  bridge          virbr0      
eno16777736  71d21143-8c54-46fe-9624-2ef730387524  802-3-ethernet  eno16777736 

显示连接的详细数据

[student@localhost 桌面]$ nmcli con show eno16777736 
connection.id:                          eno16777736
connection.uuid:                        71d21143-8c54-46fe-9624-2ef730387524
connection.interface-name:              eno16777736
connection.type:                        802-3-ethernet
connection.autoconnect:                 no
connection.timestamp:                   1501516984
connection.read-only:                   no
...

显示设备状态和详细信息

[student@localhost 桌面]$ nmcli con show eno16777736 
connection.id:                          eno16777736
connection.uuid:                        71d21143-8c54-46fe-9624-2ef730387524
connection.interface-name:              eno16777736
connection.type:                        802-3-ethernet
connection.autoconnect:                 no
connection.timestamp:                   1501516984
connection.read-only:                   no

添加DNS设置到静态连接中

[root@localhost ~]# nmcli connection modify "static" ipv4.dns 202.131.124.4

添加更多的DNS

[root@localhost ~]# nmcli connection modify "static" +ipv4.dns 8.8.8.8

注意：要使用额外的+符号，并且要是+ipv4.dns，而不是ip4.dns。

添加一个额外的ip地址

[root@localhost ~]# nmcli connection modify "static" +ipv4.addresses 192.168.200.1/24

使用命令刷新设置：/激活链接

[root@localhost ~]# nmcli connection up eno1

nmcli命令摘要

命令	用途
nmcli dev status	列出所有设备
nmcli con show	列出所有连接
nmcli con up “<\ID>”	激活，更新
nmcli con down “<\ID>”	取消激活
nmcli dev dis “<\dev>”	断开接口
nmcli net off	禁用所有管理接口
nmcli con add …	添加新的连接
nmcli con mod “<\ID>”…	修改连接
nmcli con del “<\ID>”	删除连接

编辑网络配置文件

网络配置文件/etc/sysconfig/network-scripts/ifcfg-<name>
ifcfg文件

静态	动态	任意
BOOTPROTO=none	BOOTPROTO=dhcp	ONBOOT=yes

重启服务生效

[root@localhost ~]# nmcli connection reload 
[root@localhost ~]# nmcli connection down "eno16777736"
[root@localhost ~]# nmcli connection up "eno16777736"
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/3)

配置主机名和名称解析

更改主机名

[root@localhost ~]# hostnamectl set-hostname 名字

查看主机状态

[root@localhost ~]# hostnamectl status 
   Static hostname: localhost.localdomain
         Icon name: computer
           Chassis: n/a
        Machine ID: 5fa8865ca05b4e478ef3a979acb3cfb5
           Boot ID: 68eacfcc82984aea93e7ab678468ae38
    Virtualization: vmware
  Operating System: Red Hat Enterprise Linux Server 7.0 (Maipo)
       CPE OS Name: cpe:/o:redhat:enterprise_linux:7.0:GA:server
            Kernel: Linux 3.10.0-123.el7.x86_64
      Architecture: x86_64

配置主机名解析

[root@localhost ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6