RH358管理DHCP和IP地址分配--自动化DHCP配置

RH358管理DHCP和IP地址分配–自动化DHCP配置

本章节介绍使用Ansible配置DHCP服务器和客户端。

专栏地址：https://blog.csdn.net/qq_41765918/category_11532281.html

1. 使用Ansible部署DHCP服务器

使用Ansible部署DHCP服务器遵循一个标准流程。

安装包

使用yum Ansible模块安装dhcp-server包如下:

- name: the dhcp-server package is installed
  yum:
    name: dhcp-server
    state: present

部署DHCP配置文件

DHCPv4的配置文件(/etc/dhcp/dhcpd.conf)和DHCPv6的配置文件(/etc/dhcp/dhcpd6 .conf)可由多个文件模块配置。

使用copy模块准备文件并复制到DHCP服务器。使用模板模块创建一个模板配置文件，Ansible可以在部署过程中使用Ansible变量和事实自动定制这个模板配置文件。

以下任务使用copy模块将本地的dhcpd.conf文件部署到dhcp服务器的/etc/ dhcp/dhcpd.conf文件中。

- name: the DHCPv4 configuration file is deployed
  copy:
    src: dhcpd.conf
    dest: /etc/dhcp/dhcpd.conf
    owner: root
    group: root
    mode: '0644'
    setype: dhcp_etc_t
  notify: reload dhcpd

启用和启动服务

使用Ansible service模块开启和启动服务。DHCPv4的服务名称为dhcpd。对于DHCPv6，服务名称为dhcpd6。

- name: the dhcpd and dhcpd6 services are enabled and started
  service:
    name: "{{ item }}"
    state: started
    enabled: yes
  loop:
    - dhcpd
    - dhcpd6

配置防火墙规则

使用Ansible firewalld模块开启DHCPv4的dhcp服务和dhcpv6的dhcp服务。

- name: the dhcp and dhcpv6 firewall services are opened
  firewalld:
    service: "{{ item }}"
    state: enabled
    immediate: yes
    permanent: yes
  loop:
    - dhcp
    - dhcpv6

2. 使用Ansible配置DHCP Client

对于客户端系统，使用网络系统角色。对于IPv4，将dhcp4变量设置为yes。对于IPv6，将auto6变量设置为yes。

下面以配置DHCPv4和SLAAC客户端系统的网络接口为例进行说明。

- name: make sure serverb is using DHCPv4/SLAAC
  hosts: serverb.lab.example.com
  vars:
    network_connections:
      - name: dyn_net
        type: ethernet
        mac: 52:54:00:01:fa:0b
        state: up
        ip:
          dhcp4: yes
          auto6: yes

  roles:
    - rhel-system-roles.network

3. 课本练习

[student@workstation ~]$ lab dhcp-automation start

在本练习中，您将在服务器上部署DHCP服务器，为连接到辅助网络的系统提供IPv4和IPv6地址支持。

为了支持IPv6, lab命令配置serverd使用邻居发现协议(NDP)提供前缀和默认网关，并指示客户端查询DHCPv6服务器以获得其他配置。

1. 熟悉项目及其现状。

[student@workstation ~]$ cd /home/student/dhcp-automation
[student@workstation dhcp-automation]$ tree
.
├── ansible.cfg
├── dhcp-client.yml
├── dhcp-server.yml
├── files
│   ├── dhcpd6.conf
│   └── dhcpd.conf
├── host_vars
│   ├── servera.lab.example.com
│   ├── serverb.lab.example.com
│   └── serverc.lab.example.com
├── inventory
└── solution
    ├── dhcp-client.yml
    └── dhcp-server.yml

3 directories, 11 files

[student@workstation dhcp-automation]$ cat inventory
[dhcp_servers]
servera.lab.example.com

[clients]
serverb.lab.example.com
serverc.lab.example.com

2. 检查并完成dhcp-server.yml Ansible剧本。

该脚本在服务器上部署、配置和启动DHCP服务器，以在辅助网络上提供对IPv4和IPv6地址的支持。

[student@workstation dhcp-automation]$ vim dhcp-server.yml
---
- name: Deploy a DHCPv4 and DHCPv6 server
  hosts: servera.lab.example.com
  become: true
  vars:
    network_connections:
      - name: static_net
        type: ethernet
        mac: "{{ mac_if2 }}"
        state: up
        ip:
          address:
            - 192.168.0.10/24
            - fde2:6494:1e09:2::a/64

  roles:
    - rhel-system-roles.network

  tasks:
    - name: the dhcp-server package is installed
      yum:
        name: dhcp-server
        state: present

    - name: the DHCPv4 configuration file is deployed
      copy:
        src: files/dhcpd.conf
        dest: /etc/dhcp/dhcpd.conf
      notify: reload dhcpd

    - name: the DHCPv6 configuration file is deployed
      copy:
        src: files/dhcpd6.conf
        dest: /etc/dhcp/dhcpd6.conf
      notify: reload dhcpd6

    - name: the dhcpd and dhcpd6 services are started and enabled
      service:
        name: "{{ item }}"
        state: started
        enabled: yes
      loop:
        - dhcpd
        - dhcpd6

    - name: the dhcp and dhcpv6 firewall services are opened
      firewalld:
        service: "{{ item }}"
        state: enabled
        immediate: yes
        permanent: yes
      loop:
        - dhcp
        - dhcpv6

  handlers:
    - name: reload dhcpd
      service:
        name: dhcpd
        state: restarted

    - name: reload dhcpd6
      service:
        name: dhcpd6
        state: restarted

3. 执行剧本部署DHCP服务器。

[student@workstation dhcp-automation]$ ansible-playbook --syntax-check dhcp-server.yml
[student@workstation dhcp-automation]$ ansible-playbook dhcp-server.yml

4. 检查并完成dhcp-client.yml Ansible剧本。

在系统上客户端组配置连接到次要网络的网络接口，使用DHCP获得IPv4地址，使用SLAAC和DHCPv6获得IPv6地址。

[student@workstation dhcp-automation]$ cat dhcp-client.yml
---
- name: Configure a DHCPv4 and DHCPv6 network interface
  hosts: clients
  become: true
  vars:
    network_connections:
      - name: dyn_net
        type: ethernet
        mac: "{{ mac_if2 }}"
        state: up
        ip:
          dhcp4: yes
          auto6: yes

  roles:
    - rhel-system-roles.network

  # Verifying your work by testing the IPv4 and IPv6 configuration
  tasks:
    - name: the system can connect to servera IPv4 address
      wait_for:
        host: 192.168.0.10
        port: 22
        timeout: 10

    - name: the system can connect to servera IPv6 address
      wait_for:
        host: fde2:6494:1e09:2::a
        port: 22
        timeout: 10

5. 执行剧本。

[student@workstation dhcp-automation]$ ansible-playbook --syntax-check dhcp-client.yml
[student@workstation dhcp-automation]$ ansible-playbook dhcp-client.yml

完成实验。

[student@workstation ~]$ lab dhcp-automation finish

总结

• 介绍如何使用Ansible部署DHCP服务器。
• 使用Ansible部署DHCP客户端。
• 若喜欢金鱼哥的文章，顺手点个赞。也可点个关注，因为后续会不断上干货。