Linux网络----DHCP中继服务
文章目录
前言:
DHCP中继原理
■当企业的内部网络规模较大时,通常被划分为多个不同
的子网,网络内配置了VLAN,VL AN能隔离广播,而
DHCP协议使用广播
■DHCP服务器在VLAN 100中,就只有VLAN 100内的客户机能从在此获取IP地址DHCP广播只能在一个VLAN发,所以跨VLAN广播要采用DHCP中继
DHCP中继帮助跨越DHCP广播
DHCP帮助帮忙把DHCP的广播跨越VLAN
网关帮助你跨越VLAN
■两种解决办法
为每个网段安装一 台DHCP服务器,但这种方式存在资源
. 上的浪费,而且不利于集中管理
●在连接不同网段的设备上开启DHCP中继功能,将DHCP
这种特殊的广播信息在VLAN之间转发,让其他VLAN的客
户机也能从DHCP服务器获得IP地址
生产中常用的是第二种使用DHCP服务器
1:配置各设备并启动
2:配置LSW2
<Huawei>undo terminal monitor
Info: Current terminal monitor is off.
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]
[Huawei]int e0/0/2
[Huawei-Ethernet0/0/2]p l a
[Huawei-Ethernet0/0/2]p d v 10
[Huawei-Ethernet0/0/2]un sh
Info: Interface Ethernet0/0/2 is not shutdown.
[Huawei-Ethernet0/0/2]int e0/0/3
[Huawei-Ethernet0/0/3]p l a
[Huawei-Ethernet0/0/3]p d v 20
[Huawei-Ethernet0/0/3]un sh
Info: Interface Ethernet0/0/3 is not shutdown.
[Huawei-Ethernet0/0/3]int e0/0/4
[Huawei-Ethernet0/0/4]p l a
[Huawei-Ethernet0/0/4]p d v 100
[Huawei-Ethernet0/0/4]un sh
Info: Interface Ethernet0/0/4 is not shutdown.
[Huawei-Ethernet0/0/4]int g0/0/1
[Huawei-GigabitEthernet0/0/1]int e0/0/1
[Huawei-Ethernet0/0/1]p l t
[Huawei-Ethernet0/0/1]p t a v a
[Huawei-Ethernet0/0/1]un sh
3:配置LSW1
<Huawei>undo terminal monitor
Info: Current terminal monitor is off.
<Huawei>sys
Enter system view, return user view with Ctrl+Z.
[Huawei]v b 10 20 100
Info: This operation may take a few seconds. Please wait for a moment...done.
[Huawei]int g0/0/1
[Huawei-GigabitEthernet0/0/1]p l t
[Huawei-GigabitEthernet0/0/1]p t a v a
[Huawei-GigabitEthernet0/0/1]un sh
Info: Interface GigabitEthernet0/0/1 is not shutdown.
[Huawei-GigabitEthernet0/0/1]q
[Huawei]int vlan 10
[Huawei-Vlanif10]ip add 192.168.10.1
^
Error:Incomplete command found at '^' position.
[Huawei-Vlanif10]ip add 192.168.10.1 24
[Huawei-Vlanif10]dis this
#
interface Vlanif10
ip address 192.168.10.1 255.255.255.0
#
return
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]ip add 192.168.20.1 24
[Huawei-Vlanif20]int vlan 100
[Huawei-Vlanif100]ip add 192.168.100.1 24
[Huawei-Vlanif100]q
[Huawei]dhcp enable
Info: The operation may take a few seconds. Please wait for a moment.done.
[Huawei]dhcp enable
[Huawei-Vlanif10]dhcp select relay
[Huawei-Vlanif10]dhcp relay server-
[Huawei-Vlanif10]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif10]dis this
#
interface Vlanif10
ip address 192.168.10.1 255.255.255.0
dhcp select relay
dhcp relay server-ip 192.168.100.100
#
return
[Huawei-Vlanif10]int vlan 20
[Huawei-Vlanif20]dhcp select relay
[Huawei-Vlanif20]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif20]int vlan 100
[Huawei-Vlanif100]dhcp select relay
[Huawei-Vlanif100]dhcp relay server-ip 192.168.100.100
[Huawei-Vlanif100]
4:配置Cloud1设置绑定VMnet3
5:虚拟机配置连网后,安装DHCP的包
6: 网卡绑定VMnet3
[root@lpf lpf]# cat /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=static
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=e927c915-1f32-4f8e-b4d4-77c7a3ed4823
DEVICE=ens33
ONBOOT=yes
IPADDR=192.168.100.100
PREFIX=24
GATEWAY=192.168.100.1
[root@lpf lpf]#systemctl restart network
7:修改DHCP配置文件
[root@lpf lpf]#cp /usr/share/doc/dhcp*/dhcpd.conf.example /etc/dhcp/dhcp.conf
[root@lpf lpf]#vim /etc/dhcp/dhcpd.conf
...
subnet 192.168.10.0 netmask 255.255.255.0 {
range 192.168.10.128 192.168.10.200;
option routers 192.168.10.1;
option domain-name-servers 8.8.8.8
}
subnet 192.168.20.0 netmask 255.255.255.0 {
range 192.168.20.128 192.168.20.200;
option routers 192.168.20.1;
option domain-name-servers 8.8.8.8
}
subnet 192.168.100.0 netmask 255.255.255.0 {
range 192.168.100.128 192.168.100.200;
option routers 192.168.100.1;
option domain-name-servers 8.8.8.8
}
8:关闭防火墙,启动DHCP中继服务
[root@lpf lpf]#setenforce 0
[root@lpf lpf]#iptables -F
[root@lpf lpf]#systemctl start dhcpd
9:DHCP服务器测试ping 10.0 和20.0的网关
[root@lpf lpf]#ping 192.168.10.1
.....
[root@lpf lpf]#ping 192.168.10.1
.....
10:设置PC1和PC2为DHCP模式并测试获取IP
总结:
配置子网段时,只配置了10和20网段,这时启动DHCP服务失败?
必须要配置当前主机的网段信息,虽然只是10.0和20.0两个网段请求dhcp服务,但是当前dhcp服务器所在网段100.0,也要加在subnet子项内。