1）网关服务器：ens36：12.0.0.254/24，ens33：192.168.241.254/24；Server1：192.168.241.0/24；PC1和server2：自动获取IP；交换机无需配置。要求能够使用Xshell等远程工具登录Server1和网关服务器。
Sever的网卡调整设置
PC1的网卡设置
[root@localhost ~]#systemctl stop firewalld
[root@localhost ~]#setenforce 0
setenforce: SELinux is disabled
[root@node2 ~]#hostname server1
[root@node2 ~]#su
[root@server1 ~]#systemctl stop firewalld
[root@server1 ~]#setenforce 0
[root@node3 ~]#hostname pc1
[root@node3 ~]#su
[root@pc1 ~]#systemctl stop firewalld
[root@pc1 ~]#setenforce 0
[root@localhost ~]#systemctl stop firewalld
[root@localhost ~]#setenforce 0
[root@localhost ~]#cd /etc/sysconfig/network-scripts/
[root@localhost network-scripts]#ls
ifcfg-ens33 ifdown-ppp ifup-ib ifup-Team
ifcfg-lo ifdown-routes ifup-ippp ifup-TeamPort
ifdown ifdown-sit ifup-ipv6 ifup-tunnel
ifdown-bnep ifdown-Team ifup-isdn ifup-wireless
ifdown-eth ifdown-TeamPort ifup-plip init.ipv6-global
ifdown-ib ifdown-tunnel ifup-plusb network-functions
ifdown-ippp ifup ifup-post network-functions-ipv6
ifdown-ipv6 ifup-aliases ifup-ppp
ifdown-isdn ifup-bnep ifup-routes
ifdown-post ifup-eth ifup-sit
[root@localhost network-scripts]#cp ifcfg-ens33 ifcfg-ens36
[root@localhost network-scripts]#vim ifcfg-ens36
[root@localhost network-scripts]#vim ifcfg-ens33
[root@localhost network-scripts]#systemctl restart network
[root@localhost network-scripts]#ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00inet 127.0.0.1/8 scope host lovalid_lft forever preferred_lft foreverinet6 ::1/128 scope host valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000link/ether 00:0c:29:51:4b:b5 brd ff:ff:ff:ff:ff:ffinet 192.168.241.11/24 brd 192.168.241.255 scope global ens33valid_lft forever preferred_lft foreverinet6 fe80::de6f:32c8:5a64:a6b2/64 scope link valid_lft forever preferred_lft forever
3: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN qlen 1000link/ether 52:54:00:53:c1:45 brd ff:ff:ff:ff:ff:ffinet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0valid_lft forever preferred_lft forever
4: virbr0-nic: <BROADCAST,MULTICAST> mtu 1500 qdisc pfifo_fast master virbr0 state DOWN qlen 1000link/ether 52:54:00:53:c1:45 brd ff:ff:ff:ff:ff:ff
5: ens36: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000link/ether 00:0c:29:51:4b:bf brd ff:ff:ff:ff:ff:ffinet 12.0.0.254/24 brd 12.0.0.255 scope global ens36valid_lft forever preferred_lft foreverinet6 fe80::8cb:b13b:40ac:6df1/64 scope link valid_lft forever preferred_lft forever
[root@node3 ~]#vim /etc/sysconfig/network-scripts/ifcfg-ens33
[root@node3 ~]#systemctl restart network
2）网关服务器提供DHCP服务给PC1和server2分配对应网段的IP地址和DNS服务器地址（注意后面题目的需求）。
[root@localhost ~]#cd /etc/yum.repos.d/
[root@localhost yum.repos.d]#ls
CentOS-Base.repo CentOS-fasttrack.repo CentOS-Vault.repo
CentOS-CR.repo CentOS-Media.repo epel.repo
CentOS-Debuginfo.repo CentOS-Sources.repo epel-testing.repo
[root@localhost yum.repos.d]#mkdir bak
[root@localhost yum.repos.d]#mv *.repo bak/
[root@localhost yum.repos.d]#ls
bak
[root@localhost yum.repos.d]#vim local.repo[local]
name=local
baseurl=file:///mnt
gpgcheck=0[root@localhost yum.repos.d]#mount /dev/sr0 /mnt/
mount: /dev/sr0 写保护，将以只读方式挂载
[root@localhost yum.repos.d]#yum install dhcp -y
[root@localhost yum.repos.d]#systemctl start dhcpd
Job for dhcpd.service failed because the control process exited with error code. See "systemctl status dhcpd.service" and "journalctl -xe" for details.
[root@localhost yum.repos.d]#cat /etc/dhcp/dhcpd.conf
#
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.example
# see dhcpd.conf(5) man page
#
[root@localhost yum.repos.d]#cp /usr/share/doc/dhcp-4.2.5/dhcpd.conf.example /etc/dhcp/dhcpd.conf
cp：是否覆盖"/etc/dhcp/dhcpd.conf"？ y
[root@localhost yum.repos.d]#vim /etc/dhcp/dhcpd.conf subnet 192.168.241.0 netmask 255.255.255.0 {range 192.168.241.20 192.168.241.50;option routers 192.168.241.11;
}subnet 12.0.0.0 netmask 255.255.255.0 {range 12.0.0.20 12.0.0.50;option routers 12.0.0.1;
}[root@localhost yum.repos.d]#systemctl start dhcpd
7-4修改为dhcp获取IP地址
[root@localhost ~]#systemctl restart network
3）server1服务器上创建密钥对并上传给网关服务器，并使server1的root用户可以使用root用户免交互登录网关服务器。
[root@node2 ~]#ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Created directory '/root/.ssh'.
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:oxzlK2AzEXt6XPy7ksjeGwdX1BXtyJkyzhmFmqOYlbA root@node2.localdomain
The key's randomart image is:
+---[RSA 2048]----+
| . .o o+|
| o.. .. o .|
| o .o+. o.o = |
| =E+o.+.+ = .|
| * ++S.o+ = |
| . *oo.= .+ |
| .+.o.o |
| oooo . |
| .. oo. |
+----[SHA256]-----+
[root@node2 ~]#ssh-copy-id -i .ssh/id_rsa.pub 192.168.241.11
/usr/bin/ssh-copy-id: INFO: Source of key(s) to be installed: ".ssh/id_rsa.pub"
The authenticity of host '192.168.241.11 (192.168.241.11)' can't be established.
ECDSA key fingerprint is SHA256:k/dmSIE+ic90gNaqecVvZT0PdW+9hJf9EwJQDXY1f7w.
ECDSA key fingerprint is MD5:e1:61:2b:5d:fe:10:a9:72:1f:c2:7e:2b:5b:51:f4:7c.
Are you sure you want to continue connecting (yes/no)? yes
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.241.11's password: _oo0oo_08888888088" . "88(| -_- |)0\ = /0___/'---'\___.' \\| |// './ \\||| : |||// \/_ ||||| -:- |||||- \| | \\\ - /// | || \_| ''\---/'' |_/ |\ .-\__ '-' __/-. /___'. .' /--.--\ '. .'___."" '< '.___\_<|>_/___.' >' "".| | : '- \'.;'\ _ /';.'/ - ' : | |\ \ '_. \_ __\ /__ _/ .-' / /====='-.____'.___ \_____/___.-'____.-'====='=---='^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^佛祖保佑 永无BUG 永不宕机Number of key(s) added: 1Now try logging into the machine, with: "ssh '192.168.241.11'"
and check to make sure that only the key(s) you wanted were added.
[root@node2 ~]#ssh 192.168.241.11
Last login: Sun Feb 25 13:42:09 2024 from 192.168.241.1_oo0oo_08888888088" . "88(| -_- |)0\ = /0___/'---'\___.' \\| |// './ \\||| : |||// \/_ ||||| -:- |||||- \| | \\\ - /// | || \_| ''\---/'' |_/ |\ .-\__ '-' __/-. /___'. .' /--.--\ '. .'___."" '< '.___\_<|>_/___.' >' "".| | : '- \'.;'\ _ /';.'/ - ' : | |\ \ '_. \_ __\ /__ _/ .-' / /====='-.____'.___ \_____/___.-'____.-'====='=---='^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^佛祖保佑 永无BUG 永不宕机
[root@localhost ~]#
4）server1服务器安装和启动httpd服务搭建Web网站，首页内容自定，但需要把server2的/share目录中的首页文件index.html，通过NFS挂载到server1的/var/www/html目录下使用。
[root@node2 ~]#yum install httpd -y
[root@node2 ~]#systemctl start httpd
[root@node2 ~]#curl 192.168.241.11
[root@node2 ~]#showmount -e 192.168.241.20
Export list for 192.168.241.20:
/share *
[root@node2 ~]#mount 192.168.241.20:/share /var/www/html
[root@node2 ~]#df -h
Filesystem Size Used Avail Use% Mounted on
/dev/mapper/centos-root 50G 3.7G 47G 8% /
devtmpfs 897M 0 897M 0% /dev
tmpfs 912M 0 912M 0% /dev/shm
tmpfs 912M 9.0M 903M 1% /run
tmpfs 912M 0 912M 0% /sys/fs/cgroup
/dev/sda1 5.0G 179M 4.9G 4% /boot
tmpfs 183M 12K 183M 1% /run/user/42
tmpfs 183M 0 183M 0% /run/user/0
192.168.241.20:/share 50G 4.9G 46G 10% /var/www/html[root@localhost ~]#mkdir /share
[root@localhost ~]#cd /share
[root@localhost share]#vim index.htmlcxk wby ctrl[root@localhost share]#systemctl start nfs
[root@localhost ~]#vim /etc/exports/share *[root@localhost ~]#exportfs -v
[root@localhost ~]#exportfs -r
exportfs: No options for /share *: suggest *(sync) to avoid warning
[root@localhost ~]#exportfs -v
/share <world>(ro,sync,wdelay,hide,no_subtree_check,sec=sys,secure,root_squash,no_all_squash)
[root@localhost ~]#systemctl start nfs
[root@localhost ~]#curl 192.168.241.22
cxk wby ctrl
)
