Linux系统——主机网络配置

原创已于 2025-07-31 10:53:05 修改 · 5.3k 阅读 ·

大模型引用 2 次

本内容遵循CC 4.0 BY-SA版权协议

GEO检测

Martin_wjc

关注

标签

#linux #网络

分类操作系统

于 2024-10-14 11:03:08 首次发布

Linux系统管理专栏收录该内容

17 篇文章

订阅专栏

一、查看主机的网络参数

主机名、IP地址、掩码、网关、DNS服务器地址

1、查看主机名

[root@localhost ~]# hostname
localhost.localdomain

[root@localhost ~]# hostnamectl set-hostname martin-host.linux.com
[root@localhost ~]# 

[root@localhost ~]# hostname
martin-host.linux.com

主机名建议以FQDN格式设置

2、查看IP地址

[root@martin-host ~]# ifconfig 
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.140.144  netmask 255.255.255.0  broadcast 192.168.140.255
        inet6 fe80::a4f5:a457:cfac:3860  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:c5:04:aa  txqueuelen 1000  (Ethernet)
        RX packets 1910  bytes 2214938 (2.1 MiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1090  bytes 90444 (88.3 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

MTU: 最大传输单元 
RX：接收的数据流量 
TX：发送的数据流量 

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 92  bytes 7800 (7.6 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 92  bytes 7800 (7.6 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root@martin-host ~]# ip a 
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:c5:04:aa brd ff:ff:ff:ff:ff:ff
    inet 192.168.140.144/24 brd 192.168.140.255 scope global noprefixroute dynamic ens33
       valid_lft 1197sec preferred_lft 1197sec
    inet6 fe80::a4f5:a457:cfac:3860/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

3、查看网关

[root@martin-host ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.140.2   0.0.0.0         UG    100    0        0 ens33
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0
192.168.140.0   0.0.0.0         255.255.255.0   U     100    0        0 ens33

[root@martin-host ~]# ip route 
default via 192.168.140.2 dev ens33 proto static metric 100 
192.168.140.0/24 dev ens33 proto kernel scope link src 192.168.140.12 metric 100

4、查看DNS

[root@martin-host ~]# cat /etc/resolv.conf 
# Generated by NetworkManager
search localdomain linux.com
nameserver 192.168.140.2

二、配置网卡

1、网卡配置文件

// 查看网卡的配置文件 
[root@martin-host ~]# ls /etc/sysconfig/network-scripts/
ifcfg-ens33  ifdown-ipv6    ifdown-TeamPort  ifup-ippp   ifup-routes       network-functions
ifcfg-lo

2、nmcli工具【通用】

查看网卡配置

[root@martin-host ~]# nmcli connection show 
NAME    UUID                                  TYPE      DEVICE 
ens33   c96bc909-188e-ec64-3a96-6a90982b08ad  ethernet  ens33  
virbr0  da62b2db-38ab-455a-bea1-a9bc9fa6f484  bridge    virbr0

删除网卡配置

[root@martin-host ~]# nmcli connection delete ens33 
成功删除连接 "ens33" (c96bc909-188e-ec64-3a96-6a90982b08ad)。

配置网卡

// 创建网卡配置，名称为ens33
[root@localhost ~]# nmcli connection add type ethernet ifname ens33 con-name ens33 
连接 "ens33" (a48997c5-50f2-4e1b-aef4-34570c36b12b) 已成功添加。

// 配置IP地址、网关、DNS服务器地址 
[root@localhost ~]# nmcli connection modify ens33 ipv4.addresses "172.16.100.20/24"
[root@localhost ~]# nmcli connection modify ens33 ipv4.gateway "172.16.100.2"
[root@localhost ~]# nmcli connection modify ens33 ipv4.dns "114.114.114.114"
[root@localhost ~]# nmcli connection modify ens33 +ipv4.dns "223.5.5.5"

// 将网卡IP的配置方式改为手动配置，默认为dhcp
[root@localhost ~]# nmcli connection modify ens33 ipv4.method manual 
// 设置网卡开机自动激活
[root@localhost ~]# nmcli connection modify ens33 autoconnect on

[root@localhost ~]# nmcli connection reload 
[root@localhost ~]# nmcli connection up ens33
连接已成功激活（D-Bus 活动路径：/org/freedesktop/NetworkManager/ActiveConnection/10）

三、vmware虚拟网络工作模式

1、虚拟网络、虚拟网卡

虚拟网络
相当于现实生活中的交换机，用于连接多个虚拟机，实现多个虚拟机的通信
不同虚拟网络间是隔离的
虚拟网卡
每个虚拟网络都会在物理机上生成一块虚拟网卡
作用：通过虚拟网卡将物理机连接到了对应的虚拟网络上，用于实现物理机和虚拟机间的通信

2、虚拟网络工作模式

NAT模式【常用】
NAT，网络地址转换
原理：当虚拟机主动访问外部网络时，虚拟机的IP地址会被临时转换成物理机的网卡和外界通信
虚拟网络：Vmnet 8
核心依赖的服务：Vmware NAT Service services.msc
合适的IP
桥接模式 / bridge
原理：虚拟机相当于直接接入到现实网络中
作用：方便不同物理机上的虚拟机间的相互通信
关键：虚拟网络和哪个现实网络建立桥接关系？？？？
虚拟网络：vmnet 0
仅主机模式 / host only
虚拟网络和外界通信是断的

四、路由设置

1、路由器工作原理

在这里插入图片描述

2、静态路由

在这里插入图片描述 - 配置静态路由的命令

# route add -net 目的网段 gw 下一跳

3、配置静态路由

在这里插入图片描述 - 开启路由转发功能

// 查看系统参数
[root@linux-01 ~]# sysctl -a

[root@linux-01 ~]# vim /etc/sysctl.conf 
net.ipv4.ip_forward = 1

[root@linux-01 ~]# sysctl -p 
net.ipv4.ip_forward = 1

添加静态路由

[root@linux-01 ~]# route add -net 192.168.18.0/24 gw 192.168.17.11
[root@linux-01 ~]# 
[root@linux-01 ~]# route -n 
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.16.0    0.0.0.0         255.255.255.0   U     100    0        0 ens33
192.168.17.0    0.0.0.0         255.255.255.0   U     101    0        0 ens37
192.168.18.0    192.168.17.11   255.255.255.0   UG    0      0        0 ens37

4、永久添加路由

rc.local文件
作用：开机自动执行文件中的操作

[root@linux-02 ~]# vim /etc/rc.d/rc.local 
route add -net 192.168.16.0/24 gw 192.168.17.10

[root@linux-02 ~]# chmod a+x /etc/rc.d/rc.local

创建路由文件
/etc/sysconfig/network-scripts/route-出接口

[root@linux-02 ~]# cat /etc/sysconfig/network-scripts/route-ens33
格式:  网段  via  下一跳 dev 出接口
192.168.16.0/24 via 192.168.17.10 dev ens33

[root@linux-02 ~]# nmcli connection reload 
[root@linux-02 ~]# nmcli connection up ens33 
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/3)
 
[root@linux-02 ~]# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.16.0    192.168.17.10   255.255.255.0   UG    102    0        0 ens33

5、测试网络通信的工具

ping
traceroute
路由跟踪

[root@node01 ~]# traceroute 192.168.18.11
traceroute to 192.168.18.11 (192.168.18.11), 30 hops max, 60 byte packets
 1  gateway (192.168.16.11)  0.219 ms  0.154 ms  0.141 ms
 2  192.168.17.11 (192.168.17.11)  0.439 ms  0.429 ms  0.494 ms
 3  192.168.18.11 (192.168.18.11)  0.657 ms  0.634 ms  0.600 ms

[root@node01 ~]# traceroute 192.168.18.11
traceroute to 192.168.18.11 (192.168.18.11), 30 hops max, 60 byte packets
 1  gateway (192.168.16.11)  0.240 ms  0.117 ms  0.070 ms
 2  * * *
 3  * * *
 4  * * *
 5  * * *

Windows路由跟踪

C:\Users\admin>tracert www.jd.com

通过最多 30 个跃点跟踪
到 wwwv6.jcloudimg.com [124.200.112.6] 的路由:

  1     2 ms     1 ms     2 ms  10.11.0.1
  2     *        *        *     请求超时。
  3    15 ms     4 ms     4 ms  101.39.210.93
  4     7 ms     5 ms     4 ms  10.255.58.241
  5    18 ms     7 ms     2 ms  10.255.60.25
  6     2 ms     7 ms     4 ms  218.241.165.97
  7     5 ms     2 ms     2 ms  10.240.41.185
  8     3 ms     2 ms     2 ms  10.240.38.38
  9     3 ms     3 ms     3 ms  10.14.224.22
 10     3 ms     2 ms     2 ms  124.200.112.6

跟踪完成。

六、网卡绑定

1、解决问题

单块网卡单点故障
单块网卡带宽有限，提升带宽

2、绑定的方式

bond 【centos 6.x以前】
最多支持绑定2块网卡
team 【centos 7.x】
最多支持绑定8块网卡

3、team绑定的模式

activebackup, 默认
主备，同一时间只有一块网卡正常接收流量，另外的网卡作为备用
roundrobin/loadbalance
负载均衡模式，所有网卡共同处理访问流量

4、配置activebackup模式的网卡绑定

1、删除物理网卡所有配置

[root@localhost ~]# nmcli connection show 
NAME                UUID                                  TYPE      DEVICE 
ens33               c96bc909-188e-ec64-3a96-6a90982b08ad  ethernet  ens33  
Wired connection 1  fd56d1a8-52c9-35be-835b-7b326dcd3620  ethernet  ens36  
Wired connection 2  f7340bc9-70b4-3183-b395-76734a5daaaf  ethernet  ens37  
[root@localhost ~]# 

[root@localhost ~]# nmcli connection delete fd56d1a8-52c9-35be-835b-7b326dcd3620 f7340bc9-70b4-3183-b395-76734a5daaaf 
Connection 'Wired connection 1' (fd56d1a8-52c9-35be-835b-7b326dcd3620) successfully deleted.
Connection 'Wired connection 2' (f7340bc9-70b4-3183-b395-76734a5daaaf) successfully deleted.
[root@localhost ~]# 
[root@localhost ~]# nmcli connection show 
NAME   UUID                                  TYPE      DEVICE 
ens33  c96bc909-188e-ec64-3a96-6a90982b08ad  ethernet  ens33  

[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:43 brd ff:ff:ff:ff:ff:ff
    inet 192.168.140.11/24 brd 192.168.140.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe29:e543/64 scope link 
       valid_lft forever preferred_lft forever
3: ens36: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:4d brd ff:ff:ff:ff:ff:ff
4: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:57 brd ff:ff:ff:ff:ff:ff

2、创建网卡绑定，虚拟网卡team1，指定工作模式为activebackup

[root@localhost ~]# nmcli connection add type team ifname team1 con-name team1 config '{"runner":{"name":"activebackup"}}' 
Connection 'team1' (9f6ab8cb-6b60-4b98-aee6-cfa39e3aa09c) successfully added.

[root@localhost ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:43 brd ff:ff:ff:ff:ff:ff
    inet 192.168.140.11/24 brd 192.168.140.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::20c:29ff:fe29:e543/64 scope link 
       valid_lft forever preferred_lft forever
3: ens36: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:4d brd ff:ff:ff:ff:ff:ff
4: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:29:e5:57 brd ff:ff:ff:ff:ff:ff
5: team1: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 6e:65:22:43:7d:5c brd ff:ff:ff:ff:ff:ff

3、添加物理网卡

[root@localhost ~]# nmcli connection add type team-slave ifname ens36 con-name team1-ens36 master team1
Connection 'team1-ens36' (5421b0c1-9111-4963-8857-f570b8b6bac2) successfully added.
[root@localhost ~]# 
[root@localhost ~]# nmcli connection add type team-slave ifname ens37 con-name team1-ens37 master team1
Connection 'team1-ens37' (d618d45a-d56f-4da7-82b7-5e731c8e43df) successfully added.

4、配置IP

[root@localhost ~]# nmcli connection modify team1 ipv4.addresses "192.168.140.200/24"
[root@localhost ~]# nmcli connection modify team1 ipv4.gateway "192.168.140.2"
[root@localhost ~]# nmcli connection modify team1 ipv4.dns "223.5.5.5"
[root@localhost ~]# nmcli connection modify team1 +ipv4.dns "114.114.114.114"
[root@localhost ~]# 
[root@localhost ~]# nmcli connection modify team1 ipv4.method manual 
[root@localhost ~]# nmcli connection modify team1 autoconnect on
[root@localhost ~]# 
[root@localhost ~]# nmcli connection reload 
[root@localhost ~]# nmcli connection up team1
Connection successfully activated (master waiting for slaves) (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/7)

[root@localhost ~]# ifconfig team1 
team1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 192.168.140.200  netmask 255.255.255.0  broadcast 192.168.140.255
        inet6 fe80::9e9c:2ecc:b44f:59d4  prefixlen 64  scopeid 0x20<link>
        ether 00:0c:29:29:e5:4d  txqueuelen 1000  (Ethernet)
        RX packets 8  bytes 1117 (1.0 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 29  bytes 2646 (2.5 KiB)
        TX errors 0  dropped 2 overruns 0  carrier 0  collisions 0

5、查看网卡绑定状态

[root@localhost ~]# teamdctl team1 state 
setup:
  runner: activebackup
ports:
  ens36
    link watches:
      link summary: up
      instance[link_watch_0]:
        name: ethtool
        link: up
        down count: 0
  ens37
    link watches:
      link summary: up
      instance[link_watch_0]:
        name: ethtool
        link: up
        down count: 0
runner:
  active port: ens36