基于iproute命令集配置Linux网络(ip命令)

￡神魔★判官ぃ 2022-06-08 06:54 314阅读 0赞

iproute是Linux下一个网络管理工具包合集，用于取代先前的如ifconfig，route，ifup，ifdown，netstat等历史网络管理工具。该工具包功能强大，它通过网络链路套接字接口与内核进行联系。iproute的用户界面比net-tools的用户界面要更直观。对网络资源比如链路、IP地址、路由和隧道等用“对象”抽象进行了恰当的定义，因此可以使用一致的语法来管理不同的对象。本文主要描述使用该工具包的ip命令来配置Linux网络。

一、iproute工具包集

查看iproute工具包集

  1. # more /etc/redhat-release 
  2. CentOS Linux release 7.2.1511 (Core) 
  4. ###查看当前环境下已经安装的iproute包
  5. # rpm -qa|grep iproute
  6. iproute-3.10.0-54.el7.x86_64
  8. ###查看iproute包生成的文件
  9. # rpm -ql iproute
  11. ###查看iproute包配置文件
  12. # rpm -qc iproute
  14. ###查看iproute包生成的二进制文件
  15. # rpm -ql iproute|grep "bin" 
  16. /usr/sbin/arpd
  17. /usr/sbin/bridge
  18. /usr/sbin/cbq
  19. /usr/sbin/ctstat
  20. /usr/sbin/genl
  21. /usr/sbin/ifcfg
  22. /usr/sbin/ifstat
  23. /usr/sbin/ip    
  24. /usr/sbin/lnstat
  25. /usr/sbin/nstat
  26. /usr/sbin/routef
  27. /usr/sbin/routel
  28. /usr/sbin/rtacct
  29. /usr/sbin/rtmon
  30. /usr/sbin/rtpr
  31. /usr/sbin/rtstat
  32. /usr/sbin/ss
  33. /usr/sbin/tc

iproute与net-tools命令比对图
这里写图片描述

二、ip命令帮助及模块功能

获取ip命令帮助

  1. # ip help
  2. Usage: ip [ OPTIONS ] OBJECT { COMMAND | help }
  3.       ip [ -force ] -batch filename
  4. where  OBJECT := { link | addr | addrlabel | route | rule | neigh | ntable |
  5.                   tunnel | tuntap | maddr | mroute | mrule | monitor | xfrm |
  6.                   netns | l2tp | tcp_metrics | token }
  7.       OPTIONS := { -V[ersion] | -s[tatistics] | -d[etails] | -r[esolve] |
  8.                     -h[uman-readable] | -iec |
  9.                     -f[amily] { inet | inet6 | ipx | dnet | bridge | link } |
  10.                     -4 | -6 | -I | -D | -B | -0 |
  11.                     -l[oops] { maximum-addr-flush-attempts } |
  12.                     -o[neline] | -t[imestamp] | -b[atch] [filename] |
  13.                     -rc[vbuf] [size] | -n[etns] name | -a[ll] }
  15. ###如果要获取某个子模块的帮助，如获取ip addr的具体用法，则
  16. # ip addr help
  17. Usage: ip addr {add|change|replace} IFADDR dev STRING [ LIFETIME ]
  18.                                                       [ CONFFLAG-LIST ]
  19.       ip addr del IFADDR dev STRING [mngtmpaddr]
  20.       ip addr {show|save|flush} [ dev STRING ] [ scope SCOPE-ID ]
  21.                             [ to PREFIX ] [ FLAG-LIST ] [ label PATTERN ] [up]
  22.       ip addr {showdump|restore}
  23. IFADDR := PREFIX | ADDR peer PREFIX
  24.           [ broadcast ADDR ] [ anycast ADDR ]
  25.           [ label STRING ] [ scope SCOPE-ID ]
  26. SCOPE-ID := [ host | link | global | NUMBER ]
  27. FLAG-LIST := [ FLAG-LIST ] FLAG
  28. FLAG  := [ permanent | dynamic | secondary | primary |
  29.           tentative | deprecated | dadfailed | temporary |
  30.           CONFFLAG-LIST ]
  31. CONFFLAG-LIST := [ CONFFLAG-LIST ] CONFFLAG
  32. CONFFLAG  := [ home | nodad | mngtmpaddr | noprefixroute ]
  33. LIFETIME := [ valid_lft LFT ] [ preferred_lft LFT ]
  34. LFT := forever | SECONDS
  36. # man ip //获取详细帮助

iproute各子模块功能

  1. ip link
  2.         网络设备配置命令，如可以启用/禁用某个网络设备，改变mtu及mac地址等
  4. ip addr
  5.         用于管理某个网络设备与协议(ip或ipv6)有关的地址。
  6.         与ip link类似，不过增加了协议有关的管理(ip地址管理)
  8. ip addrlabel 
  9.         ipv6的地址标签，主要用于RFC3484中描述的ipv6地址的选择。
  10.         RFC3484主要介绍了2个算法，用于ipv6地址(源地址和目标地址)的选择策略
  12. ip route    
  13.         管理路由，如添加，删除
  15. ip rule    
  16.         管理路由策略数据库。这里边有一个算法，用来控制路由的选择策略
  18. ip neigh    
  19.         用于neighbor/ARP表的管理，如显示，插入，删除等
  21. ip tunel
  22.         隧道配置
  23.         隧道的作用是将数据(可以是不同协议)封装成ip包然后再互联网传输
  25. ip maddr
  26.         多播地址管理
  28. ip mroute
  29.         多播路由管理
  31. ip monitor
  32.         状态监控。如可以持续监控ip地址和路由的状态
  34. ip xfrm
  35.         设置xfrm。xfrm是一个ip框架，可以转换数据包的格式，如用某个算法对数据包加密

三、频繁使用的几个子模块常用方法

子模块用法

  1. ip link 
  2.         ip link show 查看默认网络连接信息，不包括ip地址
  3.         ip link set 接口 [up|down] [multicast on|off]：
  5. ip addr
  6.     可以在一个接口配置多个地址而不使用接口别名：显示这些地址
  7.     ip addr show    
  8.         ip addr add dev 接口 ip地址/掩码 [ ladel 别名 ]
  9.       ip addr add dev 接口 ip地址 [ ladel 别名 ]
  10.       ip addr flush 接口 [to 网络地址]
  12. ip route            
  13.         ip route add 目标 via 下一跳 src 源地址 [dev 设备]
  14.         ip route del 目标
  15.         ip route list                                                                        
  17. 启用/禁用接口：
  18.         ip link set 接口 up|down
  19.         ifconfig 接口 up|down
  20.         ifdown 接口，ifup 接口
  21.     重置网络连接
  23. TUI或GUI
  24.         CentOS 6
  25.                 system-config-network-tui
  26.             配置结束后将保存配置文件中
  27.                 setup --> Network Configuration
  29.         CentOS 7
  30.                 nmtui

四、使用示例

  1. 查看当前主机网络连接信息
  2.     # ip link show
  3.     1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT 
  4.         link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  5.     2: eno16777728: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
  6.         link/ether 00:0c:29:57:26:9d brd ff:ff:ff:ff:ff:ff
  7.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
  8.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  10. 查看当前主机指定网络连接信息    
  11.     # ip link show eno16777728
  12.     2: eno16777728: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
  13.         link/ether 00:0c:29:57:26:9d brd ff:ff:ff:ff:ff:ff        
  15. 多播的启用与关闭
  16.     # ip link set eno16777728 multicast off
  17.     # ip link show eno16777728 //如下，没有出项MULTICAST
  18.     2: eno16777728: <BROADCAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT qlen 1000
  19.         link/ether 00:0c:29:57:26:9d brd ff:ff:ff:ff:ff:ff
  20.     # ip link set eno16777728 multicast on 
  22. 网卡的启用与关闭
  23.     # ip link set eno33554960 down
  24.     # ip link set eno33554960 up
  26. 显示主机ip地址信息
  27.     # ip addr show
  28.     1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN 
  29.         link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
  30.         inet 127.0.0.1/8 scope host lo
  31.           valid_lft forever preferred_lft forever
  32.         inet6 ::1/128 scope host 
  33.           valid_lft forever preferred_lft forever
  34.     2: eno16777728: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  35.         link/ether 00:0c:29:57:26:9d brd ff:ff:ff:ff:ff:ff
  36.         inet 172.24.8.131/24 brd 172.24.8.255 scope global dynamic eno16777728
  37.           valid_lft 1196sec preferred_lft 1196sec           ### Author : Leshami
  38.         inet6 fe80::20c:29ff:fe57:269d/64 scope link     ### Blog : http://blog.csdn.net/leshami 
  39.           valid_lft forever preferred_lft forever                ### QQ/Weixin : 645746311
  40.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  41.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  42.         inet 192.168.81.144/24 brd 192.168.81.255 scope global dynamic eno33554960
  43.           valid_lft 1380sec preferred_lft 1380sec
  45. 为指定网卡删除ip地址
  46.     # ip addr del dev eno33554960 192.168.81.144/24
  47.     # ip addr show eno33554960 
  48.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  49.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  51. 为指定网卡添加ip地址
  52.     # ip addr add dev eno33554960 192.168.81.189/24 
  53.     # ip addr show eno33554960 
  54.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  55.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  56.         inet 192.168.81.189/24 scope global eno33554960
  57.           valid_lft forever preferred_lft forever      
  59. 为指定网卡添加多ip地址      
  60.     # ip addr add dev eno33554960 192.168.81.150/24
  61.     # ip addr show eno33554960
  62.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  63.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  64.         inet 192.168.81.189/24 scope global eno33554960
  65.           valid_lft forever preferred_lft forever
  66.         inet 192.168.81.150/24 scope global secondary eno33554960
  67.           valid_lft forever preferred_lft forever
  69. 为指定网卡添加多ip及使用别名
  70.     # ip addr add dev eno33554960 192.168.81.199/24 label eno33554960:0
  72.     # ip addr show label eno33554960:0
  73.         inet 192.168.81.199/24 scope global secondary eno33554960:0
  74.           valid_lft forever preferred_lft forever
  76.     # ifconfig|grep eno33554960:0 -A2 
  77.     eno33554960:0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
  78.             inet 192.168.81.199  netmask 255.255.255.0  broadcast 0.0.0.0
  79.             ether 00:0c:29:57:26:a7  txqueuelen 1000  (Ethernet)              
  81. 释放特定网卡ip地址
  82.     # ip addr show eno33554960 
  83.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  84.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  85.         inet 192.168.81.144/24 scope global dynamic eno33554960
  86.           valid_lft 1364sec preferred_lft 1364sec
  87.         inet 192.168.81.199/24 scope global secondary eno33554960:0
  88.           valid_lft forever preferred_lft forever
  89.     # ip addr flush eno33554960 //如果不指定特定网卡，则表示当前主机所有网卡ip地址被释放
  90.     # ip addr show eno33554960
  91.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  92.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  94. 使用ip route添加网络路由
  95.     ###当前本机IP地址为172.24.8.131
  96.     ###假定要到达目标地址为:192.168.10.0/24，下一跳为 172.24.8.2 则添加路由命令如下
  98.     # route -n //首先查看当前的路由
  99.     Kernel IP routing table
  100.     Destination    Gateway        Genmask        Flags Metric Ref    Use Iface
  101.     0.0.0.0        192.168.81.2    0.0.0.0        UG    100    0        0 eno33554960
  102.     172.24.8.0      0.0.0.0        255.255.255.0  U    100    0        0 eno16777728
  103.     192.168.81.0    0.0.0.0        255.255.255.0  U    100    0        0 eno33554960
  104.     # ip route list //首先查看当前的路由
  105.     default via 192.168.81.2 dev eno33554960  proto static  metric 100 
  106.     172.24.8.0/24 dev eno16777728  proto kernel  scope link  src 172.24.8.131  metric 100 
  107.     192.168.81.0/24 dev eno33554960  proto kernel  scope link  src 192.168.81.144  metric 100
  109.     # ip route add 192.168.10.0/24 via 172.24.8.2 dev eno16777728
  110.     # ip route list |grep 192.168.10
  111.     192.168.10.0/24 via 172.24.8.2 dev eno16777728 
  113. 使用ip route添加主机路由
  114.     ###假定要到达目标地址为：192.168.20.1，下一跳为: 172.24.8.254 
  115.     # ip route add 192.168.20.1 via 172.24.8.254
  116.     # ip route list |grep 192.168.20.1
  117.     192.168.20.1 via 172.24.8.254 dev eno16777728
  119.     删除之前添加的网络路由和主机路由
  120.     # ip route del 192.168.10.0/24 ###对于网络路由应指定掩码
  121.     # ip route del 192.168.20.1
  123.     # ip route list
  124.     default via 192.168.81.2 dev eno33554960  proto static  metric 100 
  125.     172.24.8.0/24 dev eno16777728  proto kernel  scope link  src 172.24.8.131  metric 100 
  126.     192.168.81.0/24 dev eno33554960  proto kernel  scope link  src 192.168.81.144  metric 100 
  128. 删除缺省网关
  129.     # ip route del default
  130.     # ip route list|grep default
  132. 添加缺省网关
  133.     # ip route add default via 172.24.8.2 dev eno16777728
  134.     # ip route list|grep default
  135.     default via 172.24.8.2 dev eno16777728 
  137. 配置特定网卡指定IP路由
  138.     # ip addr add dev eno33554960 172.27.8.150/24 ###为eno33554960添加一个新ip
  139.     # ip addr show eno33554960
  140.     3: eno33554960: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000
  141.         link/ether 00:0c:29:57:26:a7 brd ff:ff:ff:ff:ff:ff
  142.         inet 192.168.81.144/24 scope global dynamic eno33554960
  143.           valid_lft 1246sec preferred_lft 1246sec
  144.         inet 172.27.8.150/24 scope global eno33554960
  145.           valid_lft forever preferred_lft forever
  147.     ###配置到达网络192.168.10.0经由172.27.8.2路由并且从这个ip 172.27.8.150收发数据包
  148.     # ip route add 192.168.10.0 via 172.27.8.2 src 172.27.8.150 
  149.     # ip route list |grep 172.27.8.150
  150.     172.27.8.0/24 dev eno33554960  proto kernel  scope link  src 172.27.8.150 
  151.     192.168.10.0 via 172.27.8.2 dev eno33554960  src 172.27.8.150

DBA牛鹏社(SQL/NOSQL/LINUX)

这里写图片描述

发表评论

表情：
评论列表 （有 0 条评论，314人围观）

还没有评论，来说两句吧...

相关阅读