|
|
1、Centos stream 9 网络介结8 p9 z6 }1 d3 t% u( R+ N
6 G) M2 M8 u+ z3 y% E" I: v
Centos以前版本,NetworkManage以ifcfg格式存储网络配置文件在/etc/sysconfig/networkscripts/目录中。但是,Centos steam 9现已弃用ifcfg格式,默认情况下,NetworkManage不再创建此格式的新配置文件。从Centos steam 9开始采用密钥文件格式(基于INI文件),NetworkManager网卡配置在/etc/NetworkManager/system-connections目录中。这种格式基于INI文件,可以很容易地解析和生成。NetworkManager密钥文件中的每个部分都对应于一个nm-settings(5) 和nm-settings-keyfile(5)。如果您仍然使用ifcfg格式的网络配置文件,请考虑迁移,将它们转换为keyfile格式。要一次移植所有配置文件,请输入:nmcli connection migrate,此命令将所有配置文件从ifcfg格式迁移到keyfile格式化并存储在/etc/NetworkManager/system connections/中。或者,要仅移植特定的配置文件,请输入: nmcli connection migrate <profile_name|UUID|D-Bus_path>有关详细信息,请参阅:
6 w# R; `7 }( b( h2 N# |; Y% M0 A0 ^' v: X- ^
* nm-settings-keyfile(5)
/ S" }" X" c) D- |8 G7 i
' d+ l" Y* [* t& Y+ I* nmcli(1)6 b; E1 |/ V4 p9 @
q6 q! E% O" J2、通过网络配置文件设置IP# K! B. J- H. P& n4 v
. x8 p: a, H; i
[root@10 system-connections]# pwd
& U$ E0 K& _8 W1 _! @/etc/NetworkManager/system-connections
* `1 A2 r% s X* S( [
& q% L3 E4 ~3 T% E+ y3 O- B% [8 q+ D[root@10 system-connections]# ls$ T. _3 b s. C( f
ens160.nmconnection ens192.nmconnection ens224.nmconnection ens256.nmconnection
! a6 @% B& y; G) k0 [8 M2 j7 G; @7 z. F9 |
1 V/ ^+ B# M$ ]; s- L1 g
[root@10 system-connections]# vim ens160.nmconnection7 s3 S M; c( V9 L2 r6 [* s7 f
8 |" G( o' D8 b; _* q
& Z4 f2 v2 m8 x: l4 K# T. ][connection]
$ V, Q( B# C# t* }: N% x( Rid=ens160
. q+ L2 r" e& [9 Cuuid=d8c7b37e-5eef-3bea-8893-a05f88ade99f ###正常情况可以不管,如果是虚机,建议删除或者注释掉。; d0 k. X) z6 Q# W6 h" N5 R
type=ethernet
: z1 C5 X5 N9 P) }2 Gautoconnect-priority=-999( w( ^1 N+ d# D4 h, C
interface-name=ens160- [! g+ f/ p' V4 X. a+ W. ]& K
timestamp=1739449260
' h4 e$ e' e" m0 E4 M# b* D6 }
[ethernet]3 F/ @) l* b9 Z
* }. x* v7 ]5 t9 o9 \9 H% D: T
[ipv4]6 i# M: d( d% G. y
#method=auto5 d4 Y2 e) d1 i) T* M v8 m7 c# X
method=manual
3 l; z, c1 o+ B+ E K9 Uaddress1=192.168.8.195/24,192.168.8.1" R' X9 }, I% @' K" W' ?
dns=202.106.0.20;114.114.114.114;# v; E. n. U! [2 A J( M+ q
dns-search=
- y5 C& x4 @' D' w* ]$ a/ p#route1=0.0.0.0/0,192.168.8.1,0 ##configure router gateway 配置路由网关' v1 P* ^8 p2 i$ f# p% f& f& S
2 ~& \$ }+ R: z; W: X& @/ v, K" X1 A[ipv6]6 y) M" e1 B+ K5 z8 m
addr-gen-mode=eui64
; @( ?7 ?. q& Y# ?% Dmethod=auto
' w( B: t1 s" @4 D/ ~( ~6 Mdns-search=7 ^6 y( M' b% z6 \
2 m) N4 ^- f; h' j9 q; l
[proxy]' l4 o- `/ i# A5 v! A) k
4 ^% v% S% z' u5 b# s" m7 R. d; O
; y9 F6 W# a( _% ~[root@bogon ~]# nmcli c reload7 Y, E+ S2 B" |& F. r
[root@bogon ~]# C% E6 F5 d% x8 @. N# T( l2 d
[root@bogon ~]#
# u7 P s. n/ B1 z5 J' r[root@bogon ~]#
4 n6 }+ H' g$ ]: L1 E[root@bogon ~]# nmcli c up ens160
- g9 v/ R! W+ [. m4 `. nConnection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/7)
* E/ V& i; J- R5 z3 T[root@bogon ~]# " x8 m6 u' a1 h- T" Q( p& o; r
" u4 c9 `0 s3 X! E3 v) K: `1 V; C) Y
添加反向路由:- } z* ]( ~, w* E* H0 t0 k
& t3 M: y7 Q( [* x( d
echo "net.ipv4.conf.ens160.rp_filter = 07 v2 s9 D- ?- B% `/ \9 N( x
net.ipv4.conf.ens224.rp_filter = 0
% d- F" l, S _net.ipv4.conf.ens192.rp_filter = 0
& U( X9 Q; ?0 h8 gnet.ipv4.conf.ens256.rp_filter = 0">>/etc/sysctl.conf
/ O" Y- [2 _+ e7 f+ r( S, P& U. t( N2 e# O
执行
8 Q5 t O: R3 V( S* S9 Zsysctl -p# h0 W$ m( N' I. z; u# T7 R2 @/ i1 L
/ I9 ^! M, x* `上面的步骤为解决因路由问题导致网络不通的问题,解决步骤如下:' v7 p# H$ t8 k2 [9 ~9 ~( l
[root@bogon ~]# ping -I ens160 www.baidu.com: ^& `/ R% ^2 m3 }
PING www.a.shifen.com (110.242.69.21) from 192.168.8.195 ens160: 56(84) bytes of data.6 q' \& M) Y' x0 Q% C
6 M! z$ r; H% a
^C1 ~5 n# o. N3 C6 N0 j+ E
--- www.a.shifen.com ping statistics ---
2 _+ h0 a t2 _& l66 packets transmitted, 0 received, 100% packet loss, time 66598ms: m( V$ c5 d5 @0 ?# N7 t
4 X+ T- O. }" X: |9 c0 b[root@bogon ~]# echo "net.ipv4.conf.ens160.rp_filter = 01 o% d) j( H2 {, l# f1 [
" n/ f" K7 {) M* i2 W6 rnet.ipv4.conf.ens224.rp_filter = 0">>/etc/sysctl.conf$ T: o1 s3 M* F5 s
[root@bogon ~]# echo "net.ipv4.conf.ens160.rp_filter = 0
3 h& o4 T6 U! G. C# h/ Z3 |9 {, P4 i0 U9 i
net.ipv4.conf.ens224.rp_filter = 0">>/etc/sysctl.conf^C
% p9 l/ Y, ~9 V3 L7 _' }0 L% p[root@bogon ~]# vim /etc/sysctl.conf
" a N# l5 O/ m2 M+ G[root@bogon ~]# echo "net.ipv4.conf.ens160.rp_filter = 05 j5 Q( q* z7 U9 _! c) L6 L
net.ipv4.conf.ens224.rp_filter = 09 J0 I1 b, U9 Z% Q. H1 c
net.ipv4.conf.ens192.rp_filter = 0/ N5 {6 Y7 j5 n! J3 ?5 t" y& `
net.ipv4.conf.ens256.rp_filter = 0">>/etc/sysctl.conf; D4 Z' n( V* R- a, ]0 q# L o8 |
[root@bogon ~]# sysctl -p
. U8 v: a. |. ]. Vnet.ipv4.conf.ens160.rp_filter = 04 A! g `* t% V1 V# \8 F
net.ipv4.conf.ens224.rp_filter = 0
\: v. o' J; t9 m4 F+ p' N& [net.ipv4.conf.ens192.rp_filter = 0" x. F# ~" _% _# w
net.ipv4.conf.ens256.rp_filter = 0
1 ?& C: A! w+ Q! P; E3 _[root@bogon ~]# ping -I ens160 www.baidu.com1 c1 @: t& U) {- N' C
PING www.a.shifen.com (110.242.70.57) from 192.168.8.195 ens160: 56(84) bytes of data.
: i! y+ N. x$ U" C64 bytes from 110.242.70.57 (110.242.70.57): icmp_seq=1 ttl=53 time=11.1 ms
2 V p9 e; ~6 _# b7 P64 bytes from 110.242.70.57 (110.242.70.57): icmp_seq=2 ttl=53 time=11.1 ms# X, \! C9 k5 g3 X7 V; ]$ g
64 bytes from 110.242.70.57 (110.242.70.57): icmp_seq=3 ttl=53 time=10.7 ms7 D4 u4 B c8 Z3 r4 A
^C; { @7 `8 U3 I0 B6 ?7 q# @
--- www.a.shifen.com ping statistics ---
2 p0 M8 s A5 E3 packets transmitted, 3 received, 0% packet loss, time 2004ms
X8 U6 g7 H( p- {0 T% A+ srtt min/avg/max/mdev = 10.737/10.973/11.109/0.167 ms5 Q( L6 H; c% P4 F: u
/ b# h' N% E. {7 ^- m. W4 c4 O
9 F5 x! m4 t& [' k1 h1 ?$ ?3 m" W+ g- a" _ z
) t# \. ^' H# w+ _6 g3 y0 \[root@bogon ~]# nmcli connection reload
# {7 @& A: B$ a; D' Z5 z4 f; c8 H y- e* b* s: {% u/ K/ c! |4 v0 k
[root@bogon ~]# nmcli connection down ens3: N. A$ I$ k5 l
5 H: c, i$ v0 w7 s" O5 X7 s- u
[root@bogon ~]# nmcli connection up ens3! J* L7 c I' u# p ?0 i
6 ?5 t# m6 j+ T
9 Z5 a& e! e" p( p8 W, k6 [' _: C' @
" s! I9 n ^0 E# e* k4 d0 } |
|