Linux网络----DHCP中继服务

Linux网络----DHCP中继服务

前言：

DHCP中继原理
■当企业的内部网络规模较大时，通常被划分为多个不同
的子网，网络内配置了VLAN，VL AN能隔离广播，而
DHCP协议使用广播
■DHCP服务器在VLAN 100中，就只有VLAN 100内的客户机能从在此获取IP地址DHCP广播只能在一个VLAN发，所以跨VLAN广播要采用DHCP中继

DHCP中继帮助跨越DHCP广播

DHCP帮助帮忙把DHCP的广播跨越VLAN

网关帮助你跨越VLAN
■两种解决办法
为每个网段安装一 台DHCP服务器，但这种方式存在资源
. 上的浪费，而且不利于集中管理
●在连接不同网段的设备上开启DHCP中继功能，将DHCP
这种特殊的广播信息在VLAN之间转发，让其他VLAN的客
户机也能从DHCP服务器获得IP地址
生产中常用的是第二种使用DHCP服务器

1：配置各设备并启动

2：配置LSW2

<Huawei>undo terminal monitor
Info: Current terminal monitor is off.
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]
[Huawei]int e0/0/2
[Huawei-Ethernet0/0/2]p l a
[Huawei-Ethernet0/0/2]p d v 10
[Huawei-Ethernet0/0/2]un sh
Info: Interface Ethernet0/0/2 is not shutdown.
[Huawei-Ethernet0/0/2]int e0/0/3
[Huawei-Ethernet0/0/3]p l a
[Huawei-Ethernet0/0/3]p d v 20
[Huawei-Ethernet0/0/3]un sh
Info: Interface Ethernet0/0/3 is not shutdown.
[Huawei-Ethernet0/0/3]int e0/0/4
[Huawei-Ethernet0/0/4]p l a
[Huawei-Ethernet0/0/4]p d v 100
[Huawei-Ethernet0/0/4]un sh
Info: Interface Ethernet0/0/4 is not shutdown.
[Huawei-Ethernet0/0/4]int g0/0/1
[Huawei-GigabitEthernet0/0/1]int e0/0/1
[Huawei-Ethernet0/0/1]p l t
[Huawei-Ethernet0/0/1]p t a v a
[Huawei-Ethernet0/0/1]un sh

3：配置LSW1

<Huawei>undo terminal monitor
Info: Current terminal monitor is off.
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]p l t
[Huawei-GigabitEthernet0/0/1]p t a v a
[Huawei-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[Huawei-GigabitEthernet0/0/1]q
[Huawei]int vlan 10
[Huawei-Vlanif10]ip add 192.168.10.1
                                     ^
Error:Incomplete command found at '^' position.
[Huawei-Vlanif10]ip add 192.168.10.1 24
[Huawei-Vlanif10]dis this
#
interface Vlanif10
 ip address 192.168.10.1 255.255.255.0
#
return
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]ip add 192.168.20.1 24
[Huawei-Vlanif20]int vlan 100
[Huawei-Vlanif100]ip add 192.168.100.1 24
[Huawei-Vlanif100]q
[Huawei]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]dhcp enable
[Huawei-Vlanif10]dhcp select relay
[Huawei-Vlanif10]dhcp relay server-	
[Huawei-Vlanif10]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif10]dis this
#
interface Vlanif10
 ip address 192.168.10.1 255.255.255.0
 dhcp select relay
 dhcp relay server-ip 192.168.100.100
#
return
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]dhcp select relay
[Huawei-Vlanif20]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif20]int vlan 100
[Huawei-Vlanif100]dhcp select relay
[Huawei-Vlanif100]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif100]

4：配置Cloud1设置绑定VMnet3

5：虚拟机配置连网后，安装DHCP的包

6: 网卡绑定VMnet3

[root@lpf lpf]# cat  /etc/sysconfig/network-scripts/ifcfg-ens33 
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=e927c915-1f32-4f8e-b4d4-77c7a3ed4823
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.100.100
PREFIX=24
GATEWAY=192.168.100.1

[root@lpf lpf]#systemctl restart network

7：修改DHCP配置文件

[root@lpf lpf]#cp /usr/share/doc/dhcp*/dhcpd.conf.example /etc/dhcp/dhcp.conf
[root@lpf lpf]#vim /etc/dhcp/dhcpd.conf
...
subnet 192.168.10.0 netmask 255.255.255.0 {
  range 192.168.10.128 192.168.10.200;
  option routers 192.168.10.1;
  option domain-name-servers 8.8.8.8
}
subnet 192.168.20.0 netmask 255.255.255.0 {
  range 192.168.20.128 192.168.20.200;
  option routers 192.168.20.1;
  option domain-name-servers 8.8.8.8
}
subnet 192.168.100.0 netmask 255.255.255.0 {
  range 192.168.100.128 192.168.100.200;
  option routers 192.168.100.1;
  option domain-name-servers 8.8.8.8
}

8：关闭防火墙，启动DHCP中继服务

[root@lpf lpf]#setenforce 0
[root@lpf lpf]#iptables -F
[root@lpf lpf]#systemctl start dhcpd

9：DHCP服务器测试ping 10.0 和20.0的网关

[root@lpf lpf]#ping 192.168.10.1
.....

[root@lpf lpf]#ping 192.168.10.1
.....

10：设置PC1和PC2为DHCP模式并测试获取IP

总结：

配置子网段时，只配置了10和20网段，这时启动DHCP服务失败？

必须要配置当前主机的网段信息，虽然只是10.0和20.0两个网段请求dhcp服务，但是当前dhcp服务器所在网段100.0，也要加在subnet子项内。