Linux_11/ firewalld-config, SSH, bounding

_________________________________________________________________________________________________________________________________________________

• firewall-config，是Firewalls-cmd的图形化，功能对等。

_________________________________________________________________________________________________________________________________________________

• nmcli

 _________________________________________________________________________________________________________________________________________________

	命令	解释
1	nmcli connection show	显示网络信息
2	nmcli connection add con-name DH ifname eno16777736 autoconnect no type ethernet ip4 192.168.0.77/24 gw4 192.168.0.1	创建网络会话
3	nmcli connection add con-name house ifname eno16777736 type ethernet
4	nmcli connection up house	启用网络会话house

1，显示网络信息
[root@linuxprobe ~]# nmcli connection show
NAME UUID TYPE DEVICE 
eno16777736 ec77579b-2ced-481f-9c09-f562b321e268 802-3-ethernet eno16777736
2，新建网络会话
[root@linuxprobe ~]# nmcli connection add con-name company ifname eno16777736 autoconnect no type ethernet ip4 192.168.10.10/24 gw4 192.168.10.1
Connection 'company' (86c71220-0057-419e-b615-38f4014cfdee) successfully added
[root@linuxprobe ~]# nmcli connection add con-name house type ethernet ifname eno16777736
Connection 'house' (44acf0a7-07e2-40b4-94ba-69ea973090fb) successfully added
显示网络信息
[root@linuxprobe ~]# nmcli connection show
NAME UUID TYPE DEVICE 
house        44acf0a7-07e2-40b4-94ba-69ea973090fb 802-3-ethernet -- 
company      86c71220-0057-419e-b615-38f4014cfdee 802-3-ethernet -- 
eno16777736  ec77579b-2ced-481f-9c09-f562b321e268 802-3-ethernet eno16777736 
3，启用house网络会话，且是永久生效的。
[root@linuxprobe ~]# nmcli connection up house 
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/2) 
[root@linuxprobe ~]# ifconfig 
eno1677773628: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 
inet 192.168.100.128 netmask 255.255.255.0 broadcast 192.168.100.255
......
......

_________________________________________________________________________________________________________________________________________________

• bonding 网卡绑定
  

_________________________________________________________________________________________________________________________________________________

	命令	备注
1	vim /etc/sysconfig/network-scripts/ifcfg-eno16777736	TYPE=Ethernet BOOTPROTO=none ONBOOT=yes USERCTL=no DEVICE=eno16777736 MASTER=bond0 SLAVE=yes
2	cat ifcfg-eno16777736 > ifcfg-eno33554992
3	vim /etc/sysconfig/network-scripts/ifcfg-bond0	TYPE=Ethernet BOOTPROTO=none ONBOOT=yes USERCTL=no DEVICE=bond0 IPADDR=192.168.10.10 PREFIX=24 DNS=192.168.10.1 NM_CONTROLLED=no
4	vim /etc/modprobe.d/bond.conf	alias bond0 bonding options bond0 miimon=100 mode=6
5	systemctl restart network
6	ifconfig

1，编辑网卡
1.1，编辑网卡1
[root@linuxprobe ~]# vim /etc/sysconfig/network-scripts/ifcfg-eno16777736
TYPE=Ethernet
BOOTPROTO=none
ONBOOT=yes
USERCTL=no
DEVICE=eno16777736
MASTER=bond0
SLAVE=yes

1.2，ifconfig查看通过虚拟机设置新加的网卡2：eno33554992

1.3，编辑网卡2

cat ifcfg-eno16777736 > ifcfg-eno33554992

vim ifcfg-eno33554992，修改DEVICE名字

1.4，将绑定后的设备命名为bond0并把IP地址等信息填写进去，这样当用户访问相应服务的时候，实际上就是由这两块网卡设备在共同提供服务。

 [root@linuxprobe ~]# vim /etc/sysconfig/network-scripts/ifcfg-bond0

TYPE=Ethernet

BOOTPROTO=none

ONBOOT=yes

USERCTL=no

DEVICE=bond0

IPADDR=192.168.10.10

PREFIX=24

DNS=192.168.10.1

NM_CONTROLLED=no

 2，网卡绑定

[root@linuxprobe ~]# vim /etc/modprobe.d/bond.conf
alias bond0 bonding
options bond0 miimon=100 mode=6

3，重启网络服务即可，通常只显示bond0的IP地址

[root@linuxprobe ~]# systemctl restart network
[root@linuxprobe ~]# ifconfig
bond0: flags=5187<UP,BROADCAST,RUNNING,MASTER,MULTICAST> mtu 1500
inet 192.168.10.10 netmask 255.255.255.0 broadcast 192.168.10.255
inet6 fe80::20c:29ff:fe9c:637d prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:9c:63:7d txqueuelen 0 (Ethernet)
RX packets 700 bytes 82899 (80.9 KiB)
RX errors 0 dropped 6 overruns 0 frame 0
TX packets 588 bytes 40260 (39.3 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eno16777736: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500
ether 00:0c:29:9c:63:73 txqueuelen 1000 (Ethernet)
RX packets 347 bytes 40112 (39.1 KiB)
RX errors 0 dropped 6 overruns 0 frame 0
TX packets 263 bytes 20682 (20.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

eno33554968: flags=6211<UP,BROADCAST,RUNNING,SLAVE,MULTICAST> mtu 1500
ether 00:0c:29:9c:63:7d txqueuelen 1000 (Ethernet)
RX packets 353 bytes 42787 (41.7 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 325 bytes 19578 (19.1 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0

 _________________________________________________________________________________________________________________________________________________

•  sshd远程控制服务

_________________________________________________________________________________________________________________________________________________

sshd服务的配置信息保存在/etc/ssh/sshd_config文件中。

1	vim /etc/ssh/sshd_config
2	PermitRootLogin no	禁止root远程登录
3	ssh-keygen
4
5
6	systemctl restart sshd	重启sshd服务
7	systemctl enable sshd	sshd开机启动

[root@localhost ~]# ssh-keygen
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
c3:8a:9a:f5:ea:dc:1d:0d:c0:df:77:dc:75:b3:a7:c4 root@localhost.localdomain
The key's randomart image is:
+--[ RSA 2048]----+
|                 |
|     .           |
|      o        .o|
|       + .   o .=|
|        S . . E.o|
|     . . + . o ..|
|    o . . .   .  |
|   = o . .       |
|  o.+.o .        |
+-----------------+
[root@localhost ~]# ssh-copy-id 192.168.10.77　　
/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed
/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys
root@192.168.10.77's password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh '192.168.10.77'"
and check to make sure that only the key(s) you wanted were added.

_________________________________________________________________________________________________________________________________________________

scp

_________________________________________________________________________________________________________________________________________________

[root@localhost ~]# scp -rv zhxu@localhost:/home/zhxu/Documents/ Doc

_________________________________________________________________________________________________________________________________________________

不间断会话 screen

_________________________________________________________________________________________________________________________________________________

	命令
1	screen -S linuxtest	创建一个名字为linuxtest的回话
2	screen -ls	查看
3	screen -r 31441 或者 screen -r linuxtext	恢复回话
4	exit	退出会话
5	screen -x	终端B执行后，可以实现与终端A的共享。