实验环境:
主:192.168.100.101 辅:192.168.100.102
一、主域名服务器配置
1、安装服务
[root@server ~]# dnf install bind bind-utils -y
2、编辑配置文件
[root@server ~]# vim /etc/named.conf
options {
listen-on port 53 { any; };
listen-on-v6 port 53 { any; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt";
secroots-file "/var/named/data/named.secroots";
recursing-file "/var/named/data/named.recursing";
allow-query { any; };
[root@server ~]# vim /etc/named.rfc1912.zones
zone "skills.com" IN {
type master;
file "named.z";
allow-update { none; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "199.168.192.in-addr.arpa" IN {
type master;
file "named.f";
allow-update { none; };
};
3、复制区域配置文件
[root@server ~]# cp /var/named/named.localhost /var/named/named.z
[root@server ~]# cp /var/named/named.loopback /var/named/named.f
4、编辑区域配置文件
编辑正向解析文件
[root@server ~]# cd /var/named/
[root@server named]# vim named.z
server A 192.168.199.101
server2 A 192.168.199.102
编辑反向解析文件
[root@server named]# vim named.f
101 PTR server.skills.com.
102 PTR server2.skills.com.
5、启动服务
[root@server named]# systemctl start named
[root@server named]# systemctl enable named
Created symlink /etc/systemd/system/multi-user.target.wants/named.service → /usr/lib/systemd/system/named.service.
6、防火墙放行dns服务端口
[root@server named]# firewall-cmd --add-port=53/tcp --permanent
success
[root@server named]# firewall-cmd --add-port=53/udp --permanent
success
[root@server named]# firewall-cmd --reload
Success
7、设置resolv.conf文件指向dns服务器
[root@server named]# cat /etc/resolv.conf
nameserver 192.168.199.101
8、测试dns服务器
[root@server named]# nslookup server.skills.com
Server: 192.168.199.101
Address: 192.168.199.101#53
Name: server.skills.com
Address: 192.168.199.101
[root@server named]# nslookup client.skills.com
Server: 192.168.199.101
Address: 192.168.199.101#53
Name: server2.skills.com
Address: 192.168.199.102
[root@server named]# nslookup 192.168.199.101
101.199.168.192.in-addr.arpa name = server.skills.com.
[root@server named]# nslookup 192.168.199.102
102.199.168.192.in-addr.arpa name = server2.skills.com.
二、辅域名服务器配置
1、主域名服务修改配置文件
zone "skills.com" IN {
type master;
file "named.z";
allow-transfer { 192.168.199.102; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "199.168.192.in-addr.arpa" IN {
type master;
file "named.f";
allow-transfer { 192.168.199.102; };
};
2、辅域安装服务
[root@server2 ~]# dnf install bind bind-utils -y
3、辅域编辑配置文件
[root@server2 ~]# vim /etc/named.rfc1912.zones
zone "skills.com" IN {
type slave;
file "slaves/named.z";
masters { 192.168.199.101; };
};
zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "named.loopback";
allow-update { none; };
};
zone "199.168.192.in-addr.arpa" IN {
type slave;
file "slaves/named.f";
masters { 192.168.199.101; };
};
4、启动服务查看是否将主域名区域解析文件传输过来(无须手动配置解析文件)
[root@server2 ~]# systemctl restart named
[root@server2 ~]# ll /var/named/slaves/
total 8
-rw-r--r--. 1 named named 401 Sep 22 17:00 named.f
-rw-r--r--. 1 named named 279 Sep 22 16:57 named.z