Linux配置DNS分离解析及结合DHCP自动分配ip（综合实验）

最新推荐文章于 2023-09-22 14:29:54 发布

Xnah_

最新推荐文章于 2023-09-22 14:29:54 发布

阅读量1.2k

点赞数

分类专栏： Linux 文章标签： linux 服务器网络运维

本文链接：https://blog.csdn.net/weixin_58544496/article/details/126364448

版权

Linux 专栏收录该内容

25 篇文章 3 订阅

订阅专栏

一、配置DNS分离解析

要求：DNS将一个域名对内网外网分离解析成不同的ip，使局域网主机解析www.benet.com 为192.168.116.100，外网主机解析 www.benet.com 为12.0.0.1。

1.给DNS服务器加一个网卡，ens33做内网地址网关，ens36配置外网地址网关。

[root@localhost1 named]#ifconfig 

ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.116.10  netmask 255.255.255.0  broadcast 192.168.116.255
        inet6 fe80::7791:1d06:d2da:af8e  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:3b:4b:c3  txqueuelen 1000  (Ethernet)
        RX packets 444  bytes 70346 (68.6 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 213  bytes 28884 (28.2 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

ens36: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 12.0.0.254  netmask 255.0.0.0  broadcast 12.255.255.255
        inet6 fe80::cb5b:c48e:ea93:9220  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:3b:4b:cd  txqueuelen 1000  (Ethernet)
        RX packets 133  bytes 14794 (14.4 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 234  bytes 32577 (31.8 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

2.修改主配置文件

options {
        listen-on port 53 { any; };
        #listen-on-v6 port 53 { ::1; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        recursing-file  "/var/named/data/named.recursing";
        secroots-file   "/var/named/data/named.secroots";
        allow-query     { any; };
        ...
};

include "/etc/named.rfc1912.zones";

3.修改区域配置文件

配置DNS分离解析需要划分view，一旦启用view，所有的zone（包括/etc/named.conf中的根域配置"."）必须都在view下，所以要把系统默认的自检用的zone也放在view下或删除。

view "lan" {    --定义内网view，view代表容器分割
        match-clients {192.168.116.0/24; };    --匹配内网网段
        zone "benet.com" IN {      --设置要解析的域名
                type master;
                file "benet.com.zone.lan";   --指定区域数据配置文件
        };

        zone "." IN {      --将/etc/named.conf 中的根域配置转移过来
                type hint;
                file "named.ca";
        };
};

view "wan" {    --定义外网view
        match-clients { any; };   --匹配除了内网网段以外的任意地址
        zone "benet.com" IN {
                type master;
                file "benet.com.zone.wan";   --指定区域数据配置文件

        };
};

4.修改区域数据配置文件

benet.com.zone.lan

[root@localhost1 named]#cp -p named.localhost benet.com.zone.lan
[root@localhost1 named]#vim benet.com.zone.lan 
$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       192.168.116.10
www  IN A       192.168.116.100  --内网主机通过解析www.benet.com的地址得到192.168.116.100

benet.com.zone.wan

[root@localhost1 named]#cp -p named.localhost benet.com.zone.wan
[root@localhost1 named]#vim benet.com.zone.wan 
$TTL 1D
@       IN SOA  @ rname.invalid. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
        NS      @
        A       12.0.0.254
www IN  A       12.0.0.1  --外网主机通过解析www.benet.com的地址得到12.0.0.1

5.重启服务使配置生效，关闭防火墙和selinux

[root@localhost1 named]#systemctl restart named
[root@localhost1 named]#systemctl stop firewalld
[root@localhost1 named]#setenforce 0

6.在内网客户端配置中添加DNS服务器地址，并测试解析域名（这里用linux客户端测试）

[root@localhost2 ~]#vim /etc/sysconfig/network-scripts/ifcfg-ens33 
IPADDR=192.168.116.20
NETMASK=255.255.255.0
GATEWAY=192.168.116.10       --将网关设为刚配置的DNS服务器ens33地址
DNS1=192.168.116.10       --将DNS也设为刚配置的DNS服务器ens33地址

//重启网卡使配置生效
[root@localhost1 named]#systemctl restart network

//关闭防火墙和selinux
[root@localhost1 named]#systemctl stop firewalld
[root@localhost1 named]#setenforce 0

//测试内网客户端访问www.benet.com
[root@localhost2 ~]#nslookup www.benet.com
Server:		192.168.116.10
Address:	192.168.116.10#53

Name:	www.benet.com
Address: 192.168.116.100   --解析成功

7.在外网客户端配置中添加DNS服务器地址，并测试解析域名（这里用windows客户端测试）

将windows客户端的网关和DNS服务器设置为我们设置的DNS服务器ens36的ip

测试连接，测试访问www.benet.com，解析成功

二、结合DHCP服务，自动为DNS服务器分配ip地址

1.为DNS服务器配置DHCP服务

//将模板文件拷贝到dhcp配置文件中
[root@localhost1 dhcp-4.2.5]#cp dhcpd.conf.example /etc/dhcp/dhcpd.conf 

//修改dhcp配置文件
[root@localhost1 dhcp-4.2.5]#vim /etc/dhcp/dhcpd.conf 

subnet 192.168.116.0 netmask 255.255.255.0 {    --指定我们的内网网段
   range 192.168.116.100 192.168.116.200;     --指定ip地址池范围
   option routers 192.168.116.10;     --网关地址
   default-lease-time 604800;     --租约最短时间7天
   max-lease-time 864000;    --租约最长时间10天
   option domain-name-servers 192.168.116.10;   --DNS服务器地址
   option domain-name "benet.com";    --DNS解析的域名
}

 subnet 12.0.0.0 netmask 255.0.0.0 {  --指定我们的外网网段
   range 12.0.0.100 12.0.0.200;
   option routers 12.0.0.254;
   default-lease-time 604800; 
   max-lease-time 864000;
   option domain-name-servers 12.0.0.254;
   option domain-name "benet.com";
}

//重启服务使配置生效
[root@localhost1 dhcp-4.2.5]#systemctl restart dhcpd

2.将测试客户端的网卡配置改为dhcp，测试是否能自动获取

[root@localhost2 ~]#vim /etc/sysconfig/network-scripts/ifcfg-ens33 
TYPE="Ethernet"
PROXY_METHOD="none"
BROWSER_ONLY="no"
BOOTPROTO="dhcp"   --这里改为dhcp，删除掉静态ip等
DEFROUTE="yes"
IPV4_FAILURE_FATAL="no"
IPV6INIT="yes"
IPV6_AUTOCONF="yes"
IPV6_DEFROUTE="yes"
IPV6_FAILURE_FATAL="no"
IPV6_ADDR_GEN_MODE="stable-privacy"
NAME="ens33"
UUID="0b9122cc-f871-4b9b-8ca5-51dc7e0b9fb4"
DEVICE="ens33"
ONBOOT="yes"

//重启服务，查看是否生效
[root@localhost2 ~]#systemctl restart network

//生效，DHCP服务为测试客户端分配了ip地址池中的192.168.116.130
[root@localhost2 ~]#ifconfig ens33
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.116.130  netmask 255.255.255.0  broadcast 192.168.116.255
        inet6 fe80::6fa1:2a57:eb7:f714  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:fc:cd:08  txqueuelen 1000  (Ethernet)
        RX packets 1091  bytes 154300 (150.6 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 654  bytes 64637 (63.1 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

//自动获取到了DNS服务器的地址和域名
[root@localhost2 ~]#cat /etc/resolv.conf 
# Generated by NetworkManager
search benet.com
nameserver 192.168.116.10