综合测验：配置主dns，dhcp，虚拟主机，nfs文件共享等 - 指南

综合实验(所有设备关闭防火墙和selinux)

1. 在appsrv上部署主dns，为example.com提供域名解析

   安装bind bind-chroot

   root@appsrv ~]# yum install bind bind-chroot -y

   编辑主配置文件，全局配置文件，正向解析文件

   [root@appsrv ~]# vim /etc/named.conf
   options {
   listen-on port 53 { any; };
   listen-on-v6 port 53 { any; };
   directory       "/var/named";
   dump-file       "/var/named/data/cache_dump.db";
   statistics-file "/var/named/data/named_stats.txt";
   memstatistics-file "/var/named/data/named_mem_stats.txt";
   recursing-file  "/var/named/data/named.recursing";
   secroots-file   "/var/named/data/named.secroots";
   allow-query     { any; };

   [root@appsrv ~]# cd /var/named/
   [root@appsrv named]# cp -p named.localhost xie.com
   [root@appsrv named]# cp -p named.empty com.xi

   [root@appsrv ~]# vim /etc/named.rfc1912.zones
   zone "example.com" IN {
   type master;
   file "xie.com";
   allow-update { none; };
   };
   zone "100.168.192.in-addr.arpa" IN {
   type master;
   file "com.xie";
   allow-update { none; };
   };

   [root@appsrv ~]# vim /var/named/xie.com
   $TTL 1D
   @       IN SOA  appsrv.example.com. root.example.com. (
   2025082301      ; serial
   1D      ; refresh
   1H      ; retry
   1W      ; expire
   3H )    ; minimum
   NS      appsrv.example.com.
   appsrv IN  A 192.168.100.10
   www  IN  A 192.168.100.10

   [root@appsrv ~]# systemctl restart named
   [root@appsrv ~]# systemctl enable named

   2.配置DHCP服务器，为client客户端网络分配地址，地址池范围：192.168.0.110-192.168.0.190/24

   安装 dhcp

   [root@storagesrv ~]# yum install dhcp -y

   覆盖dhcp主配置文件

   [root@storagesrv ~]# cp -p /usr/share/doc/dhcp*/dhcpd.conf.example /etc/dhcp/dhcpd.conf
   cp: overwrite ‘/etc/dhcp/dhcpd.conf’? y

   编辑dhcp主配置文件

   [root@storagesrv ~]# vim /etc/dhcp/dhcpd.conf
   subnet 192.168.100.0 netmask 255.255.255.0 {
   }
   subnet 192.168.0.0 netmask 255.255.255.0 {
   range 192.168.0.110 192.168.0.190;
   option routers 192.168.0.254;
   default-lease-time 600;
   max-lease-time 7200;
   }

   STORAGESRV:

   一、NFS服务

   1、共享/webdata目录

   2、用于存储appsrv主机的web数据

   3、仅允许appsrv主机访问该共享

   安装 nfs-utils rpcbind

[root@storagesrv ~]# yum install nfs-utils rpcbind -y

创建共享目录

[root@storagesrv ~]# mkdir /webdata
[root@storagesrv ~]# vim /etc/exports
/webdata 192.168.100.10/24(rw)
[root@storagesrv ~]# chmod o+w /webdata

[root@storagesrv ~]# systemctl restart rpcbind
[root@storagesrv ~]# systemctl enable rpcbind
[root@storagesrv ~]# systemctl restart nfs
[root@storagesrv ~]# systemctl enable nfs

nfs客户端（在主dns上完成）

创建挂载点/luoqi

[root@appsrv ~]# mkdir /luoqi

永久挂载共享目录/webdata

[root@appsrv ~]# vim /etc/fstab
192.168.100.20:/webdata /luoqi nfs defaults 0 0

WEB服务

1、DocumentRoot为/luoqi

2、要求通过http://www.example.com能够成功访问该站点，内容为welcome to luoqi.

安装httpd

[root@appsrv ~]# yum install httpd -y

复制虚拟主机的配置文件到/etc/httpd/conf.d/

[root@appsrv ~]# cp -p /usr/share/doc/httpd-2.4.6/httpd-vhosts.conf /etc/httpd/conf.d/

编辑虚拟主机配置文件

[root@appsrv ~]# vim /etc/httpd/conf.d/httpd-vhosts.conf
DocumentRoot "/luoqi"
ServerName www.example.com
AllowOverride None
Require all granted
[root@appsrv ~]# systemctl restart httpd
[root@appsrv ~]# systemctl enable httpd

[root@appsrv ~]# cd /luoqi
[root@appsrv luoqi]# ls
[root@appsrv luoqi]# echo welcome to luoqi > index.html

配置dhcp中继，开启ip转发功能使client能够自动获取ip

dhcp中继

NAT模式网卡ip地址：192.168.100.254

仅主机模式网卡ip为：192.168.0.254

client

主机名：client.example.com

网卡为仅主机模式，自动获取ip地址，获取的ip地址的网段为192.168.0.0/24

dhcp中继nat网卡配置

[root@routersrv ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens33
IPADDR=192.168.100.254

仅主机网卡配置

[root@routersrv ~]# nmcli connection
NAME                UUID                                  TYPE      DEVICE
ens33               c96bc909-188e-ec64-3a96-6a90982b08ad  ethernet  ens33
virbr0              906c8b56-9adf-4276-aaf4-dc767b596e7b  bridge    virbr0
Wired connection 1  f7f4387c-ce62-3ed3-b7dc-674fb781fcd9  ethernet  ens36

[root@routersrv ~]# nmcli connection delete Wired\ connection\ 1
[root@xieyuhui3 ~]# nmcli connection add con-name ens36 ifname ens36 type ethernet
[root@xieyuhui3 ~]# nmcli connection modify ens36 ipv4.addresses 192.168.0.254/24 ipv4.gateway 192.168.0.254 ipv4.method manual connection.autoconnect yes
[root@routersrv ~]# nmcli connection up ens36

[root@routersrv ~]# systemctl restart network

client网卡配置

TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
BOOTPROTO=dhcp
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
DEVICE=ens33
ONBOOT=yes

dhcp中继安装dhcp，开启IP转发

[root@routersrv yum.repos.d]# yum install dhcp -y
[root@routersrv ~]# vim /etc/sysctl.conf
net.ipv4.ip_forward = 1
[root@routersrv ~]# sysctl -p
net.ipv4.ip_forward = 1
[root@routersrv ~]# dhcrelay 192.168.100.10

1、在storagesrv使用nslookup命令解析www.example.com，并截图

2.在client中的网卡的配置文件截图

3.在client中执行ip a show ens33命令，并截图

4.在appsrv中执行df -Th命令，并截图

5.在storagesrv中执行cat /etc/exports并截图

6.在storagesrv中使用命令curl http://www.example.com，并截图