综合实验(所有设备关闭防火墙和selinux)
-
在appsrv上部署主dns,为example.com提供域名解析
安装bind bind-chroot
root@appsrv ~]# yum install bind bind-chroot -y
编辑主配置文件,全局配置文件,正向解析文件
[root@appsrv ~]# vim /etc/named.conf options {listen-on port 53 { any; };listen-on-v6 port 53 { any; };directory "/var/named";dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";recursing-file "/var/named/data/named.recursing";secroots-file "/var/named/data/named.secroots";allow-query { any; };
[root@appsrv ~]# cd /var/named/ [root@appsrv named]# cp -p named.localhost xie.com [root@appsrv named]# cp -p named.empty com.xi
[root@appsrv ~]# vim /etc/named.rfc1912.zones zone "example.com" IN {type master;file "xie.com";allow-update { none; }; };zone "100.168.192.in-addr.arpa" IN {type master;file "com.xie";allow-update { none; }; };
[root@appsrv ~]# vim /var/named/xie.com $TTL 1D @ IN SOA appsrv.example.com. root.example.com. (2025082301 ; serial1D ; refresh1H ; retry1W ; expire3H ) ; minimumNS appsrv.example.com. appsrv IN A 192.168.100.10 www IN A 192.168.100.10
[root@appsrv ~]# systemctl restart named [root@appsrv ~]# systemctl enable named
2.配置DHCP服务器,为client客户端网络分配地址,地址池范围:192.168.0.110-192.168.0.190/24
安装 dhcp
[root@storagesrv ~]# yum install dhcp -y
覆盖dhcp主配置文件
[root@storagesrv ~]# cp -p /usr/share/doc/dhcp*/dhcpd.conf.example /etc/dhcp/dhcpd.conf cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y
编辑dhcp主配置文件
[root@storagesrv ~]# vim /etc/dhcp/dhcpd.confsubnet 192.168.100.0 netmask 255.255.255.0 { }subnet 192.168.0.0 netmask 255.255.255.0 {range 192.168.0.110 192.168.0.190;option routers 192.168.0.254;default-lease-time 600;max-lease-time 7200; }
STORAGESRV:
一、NFS服务
1、共享/webdata目录
2、用于存储appsrv主机的web数据
3、仅允许appsrv主机访问该共享
安装 nfs-utils rpcbind
[root@storagesrv ~]# yum install nfs-utils rpcbind -y
创建共享目录
[root@storagesrv ~]# mkdir /webdata
[root@storagesrv ~]# vim /etc/exports/webdata 192.168.100.10/24(rw)
[root@storagesrv ~]# chmod o+w /webdata
[root@storagesrv ~]# systemctl restart rpcbind
[root@storagesrv ~]# systemctl enable rpcbind
[root@storagesrv ~]# systemctl restart nfs
[root@storagesrv ~]# systemctl enable nfs
nfs客户端(在主dns上完成)
创建挂载点/luoqi
[root@appsrv ~]# mkdir /luoqi
永久挂载共享目录/webdata
[root@appsrv ~]# vim /etc/fstab
192.168.100.20:/webdata /luoqi nfs defaults 0 0
WEB服务
1、DocumentRoot为/luoqi
2、要求通过http://www.example.com能够成功访问该站点,内容为welcome to luoqi.
安装httpd
[root@appsrv ~]# yum install httpd -y
复制虚拟主机的配置文件到/etc/httpd/conf.d/
[root@appsrv ~]# cp -p /usr/share/doc/httpd-2.4.6/httpd-vhosts.conf /etc/httpd/conf.d/
编辑虚拟主机配置文件
[root@appsrv ~]# vim /etc/httpd/conf.d/httpd-vhosts.conf<VirtualHost 192.168.100.10:80> DocumentRoot "/luoqi"ServerName www.example.com<Directory "/luoqi">AllowOverride NoneRequire all granted
</Directory>
</VirtualHost>[root@appsrv ~]# systemctl restart httpd
[root@appsrv ~]# systemctl enable httpd
[root@appsrv ~]# cd /luoqi
[root@appsrv luoqi]# ls
[root@appsrv luoqi]# echo welcome to luoqi > index.html
配置dhcp中继,开启ip转发功能使client能够自动获取ip
dhcp中继
NAT模式网卡ip地址:192.168.100.254
仅主机模式网卡ip为:192.168.0.254
client
主机名:client.example.com
网卡为仅主机模式,自动获取ip地址,获取的ip地址的网段为192.168.0.0/24
dhcp中继nat网卡配置
[root@routersrv ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33IPADDR=192.168.100.254
仅主机网卡配置
[root@routersrv ~]# nmcli connection
NAME UUID TYPE DEVICE
ens33 c96bc909-188e-ec64-3a96-6a90982b08ad ethernet ens33
virbr0 906c8b56-9adf-4276-aaf4-dc767b596e7b bridge virbr0
Wired connection 1 f7f4387c-ce62-3ed3-b7dc-674fb781fcd9 ethernet ens36
[root@routersrv ~]# nmcli connection delete Wired\ connection\ 1
[root@xieyuhui3 ~]# nmcli connection add con-name ens36 ifname ens36 type ethernet
[root@xieyuhui3 ~]# nmcli connection modify ens36 ipv4.addresses 192.168.0.254/24 ipv4.gateway 192.168.0.254 ipv4.method manual connection.autoconnect yes
[root@routersrv ~]# nmcli connection up ens36
[root@routersrv ~]# systemctl restart network
client网卡配置
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
DEVICE=ens33
ONBOOT=yes
dhcp中继安装dhcp,开启IP转发
[root@routersrv yum.repos.d]# yum install dhcp -y
[root@routersrv ~]# vim /etc/sysctl.confnet.ipv4.ip_forward = 1[root@routersrv ~]# sysctl -pnet.ipv4.ip_forward = 1[root@routersrv ~]# dhcrelay 192.168.100.10
1、在storagesrv使用nslookup命令解析www.example.com,并截图
2.在client中的网卡的配置文件截图
3.在client中执行ip a show ens33命令,并截图
4.在appsrv中执行df -Th命令,并截图
5.在storagesrv中执行cat /etc/exports并截图
6.在storagesrv中使用命令curl http://www.example.com,并截图