部署dhcp服务器
主机发送Discover报文
目标为广播地址
同一网段的dhcp收到报文后，dhcp响应一个offer报文
offer报文：dhcp自己的ip地址。和客户端ip以及使用周期，和客户端ip网络参数
最后主机单独发一个request报文 给那个选择的dhcp服务器 （解决多个dhcp在同一网段都提供offer的问题，主要是先到先得）
dhcp最后发送一个ack确认报文给主机
dhcp和主机不在同一网段得配置dhcp中继
客户端无法指定我可以单独使用哪个dhcp
实践
1>安装包
[root@servera ~]# yum install -y dhcp-server2> 准本配置文件
[root@servera ~]# cp /usr/share/doc/dhcp-server/dhcpd.conf.example /etc/dhcp/dhcpd.conf
cp: overwrite '/etc/dhcp/dhcpd.conf'? y 这个模板十分好用
[root@servera ~]#default-lease-time 600;
max-lease-time 7200;
log-facility local7;配置了日志设备，那么你就需要在rsyslog中，定义发送到这个local7的日志要转存在哪个日志文件内vim /etc/dhcp/dhcpd.conf
authoritative;
log-facility local7;subnet 192.168.0.0 netmask 255.255.255.0 { 定义子网range 192.168.0.200 192.168.0.254; 分配IP地址的范围default-lease-time 600; 定义默认租期max-lease-time 7200; #option routers 192.168.0.1; 定义网关的option domain-search "example.com"; 定义域名option domain-name-servers 172.25.254.254; DNS服务器option broadcast-address 192.168.0.255; 广播地址 #可以忽略# option next-server 指定tftp服务器的IP PXE# filename ""引导文件在哪里 PXE
}dhcpd -t #这个命令可以验证配置文件
3> 启动DHCP服务器
[root@servera ~]# systemctl enable --now dhcpd
[root@servera ~]# firewall-cmd --permanent --add-service=dhcp
success
[root@servera ~]# firewall-cmd --reload
success4> 客户端怎么操作
[root@serverb ~]# nmcli connection add type ethernet con-name eth1 ifname eth1 ipv4.method auto 就只需要把地址的方式改成auto
Connection 'eth1' (d008c5e7-6868-448a-8a16-133502072777) successfully added.
[root@serverb ~]# nmcli connection up eth15> 固定IP地址。给一个MAC地址，分配一个特定的地址host serverc {hardware ethernet 52:54:00:01:fa:0c; MACfixed-address 192.168.0.150; 固定的IP地址
}
[root@serverc ~]# nmcli connection add type ethernet con-name eth1 ifname eth1 ipv4.method auto
Connection 'eth1' (4dc7753b-fe97-4bc8-97f3-316b373c29c1) successfully added.
[root@serverc ~]# nmcli connection up eth1
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/40)
[root@serverc ~]#[root@servera dhcp-server]# systemctl status dhcpd
● dhcpd.service - DHCPv4 Server DaemonLoaded: loaded (/usr/lib/systemd/system/dhcpd.service; enabled; vendor preset: disabled)Active: active (running) since Mon 2022-09-05 18:40:00 CST; 3min 54s agoDocs: man:dhcpd(8)man:dhcpd.conf(5)Main PID: 24264 (dhcpd)Status: "Dispatching packets..."Tasks: 1 (limit: 11250)Memory: 4.9MCGroup: /system.slice/dhcpd.service└─24264 /usr/sbin/dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dhcpd -group dhcpd --no-pidSep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPOFFER on 192.168.0.201 to 52:54:00:02:fa:0c (serverc) via eth1
Sep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPREQUEST for 192.168.0.201 (192.168.0.10) from 52:54:00:02:fa:0c (serverc) via eth1
Sep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPACK on 192.168.0.201 to 52:54:00:02:fa:0c (serverc) via eth1
Sep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPOFFER on 192.168.0.202 to 52:54:00:02:fa:0d (serverd) via eth1
Sep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPREQUEST for 192.168.0.202 (192.168.0.10) from 52:54:00:02:fa:0d (serverd) via eth1
Sep 05 18:40:06 servera.lab.example.com dhcpd[24264]: DHCPACK on 192.168.0.202 to 52:54:00:02:fa:0d (serverd) via eth1
Sep 05 18:42:37 servera.lab.example.com dhcpd[24264]: DHCPDISCOVER from 52:54:00:01:fa:0b via eth1
Sep 05 18:42:38 servera.lab.example.com dhcpd[24264]: DHCPOFFER on 192.168.0.203 to 52:54:00:01:fa:0b (serverb) via eth1
Sep 05 18:42:38 servera.lab.example.com dhcpd[24264]: DHCPREQUEST for 192.168.0.203 (192.168.0.10) from 52:54:00:01:fa:0b (serverb) via eth1
Sep 05 18:42:38 servera.lab.example.com dhcpd[24264]: DHCPACK on 192.168.0.203 to 52:54:00:01:fa:0b (serverb) via eth1
从dhcpd[24264]可以看到 dhcp的工作过程，与理论一致dhcp6
ipv6得结合网络设备来分配网关
ipv6得与网络设备结合得到完整的功能，所以会很麻烦
无线状态地址自动配置slaac 方法依赖于路由器为客户端提系统提供网络配置
radvump查看公告信息
也可以通过linux模拟路由器 以提供slaac功能
slaac可也提供网关 ipv6前缀 dns服务器 dns搜索列表功能
实践
[root@workstation ~]# lab dhcp-automation start
[root@serverd ~]# systemctl status radvd.service
● radvd.service - Router advertisement daemon for IPv6
Loaded: loaded (/usr/lib/systemd/system/radvd.service; enabled; vendor preset: disabled)
Active: active (running) since Mon 2022-09-05 19:27:45 CST; 56s ago
Process: 8169 ExecStart=/usr/sbin/radvd $OPTIONS (code=exited, status=0/SUCCESS)
Main PID: 8171 (radvd)Tasks: 2 (limit: 11250)
Memory: 864.0K
CGroup: /system.slice/radvd.service├─8171 /usr/sbin/radvd -u radvd└─8172 /usr/sbin/radvd -u radvdSep 05 19:27:45 serverd.lab.example.com systemd[1]: Starting Router advertisement daemon for IPv6...
Sep 05 19:27:45 serverd.lab.example.com radvd[8169]: version 2.17 started
Sep 05 19:27:45 serverd.lab.example.com systemd[1]: Started Router advertisement daemon for IPv6.
[root@serverd ~]#
配置ipv6
1>serverd 模拟路由器配置SLAAC功能。需要这个东西提供网关
[root@serverd ~]# cat /etc/radvd.conf
interface eth1
{AdvSendAdvert on;AdvManagedFlag on;AdvOtherConfigFlag on;MaxRtrAdvInterval 60;
};2> radvd 软件包提供了一个工具radvdump 用来获取路由公告信息(路由器来提供的，)
# based on Router Advertisement from fe80::5a83:c374:2215:148f IPV6的网关
# received by interface eth1
#interface eth1
{AdvSendAdvert on;# Note: {Min,Max}RtrAdvInterval cannot be obtained with radvdumpAdvManagedFlag on; 通过DHCP6来获取IP地址AdvOtherConfigFlag on; IPv6 路由器指⽰客⼾端查询 DHCPv6 服务器，AdvReachableTime 0;AdvRetransTimer 0;AdvCurHopLimit 64;AdvDefaultLifetime 180;AdvHomeAgentFlag off;AdvDefaultPreference medium;AdvSourceLLAddress on;
}; # End of interface definition2>DHCPV6功能： 比如网络信息，IP,DNS等都是有他来提供的3> 部署安装包
[root@servera ~]# yum install -y dhcp-server4> 修改配置文件
[root@servera ~]# cp /usr/share/doc/dhcp-server/dhcpd6.conf.example /etc/dhcp/dhcpd6.conf
cp: overwrite '/etc/dhcp/dhcpd6.conf'? y
[root@servera ~]#cat /etc/dhcp/dhcpd6.conf 唯一的不同时不能设置网关authoritative;
subnet6 fde2:6494:1e09:2::/64 {range6 fde2:6494:1e09:2::20 fde2:6494:1e09:2::60;option dhcp6.name-servers fde2:6494:1e09:2::d;option dhcp6.domain-search "backend.lab.example.com";default-lease-time 600; max-lease-time 7200;
}
[root@servera ~]# nmcli connection add type ethernet con-name eth1 ifname eth1 ipv6.addresses fde2:6494:1e09:2::a/64 ipv6.method manual
Connection 'eth1' (eb7dc998-d861-435c-8abd-2b7f061f8957) successfully added.
[root@servera ~]# nmcli connection up eth1
[root@servera ~]# systemctl enable --now dhcpd6.service
Created symlink /etc/systemd/system/multi-user.target.wants/dhcpd6.service → /usr/lib/systemd/system/dhcpd6.service.
[root@servera ~]# firewall-cmd --add-service=dhcpv6 --permanent
success
[root@servera ~]# firewall-cmd --reload
success
[root@servera ~]#[root@serverc ~]# nmcli connection add type ethernet ifname eth1 con-name eth1 ipv6.method auto
Connection 'eth1' (95356996-edb3-4750-8170-e341cb604c57) successfully added.
[root@serverc ~]# nmcli connection up eth1
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/3)
[root@serverc ~]#5> 默认网关
[root@serverc ~]# ip -6 route
::1 dev lo proto kernel metric 256 pref medium
fde2:6494:1e09:2::60 dev eth1 proto kernel metric 100 pref medium
fe80::/64 dev eth1 proto kernel metric 100 pref medium
fe80::/64 dev eth0 proto kernel metric 106 pref medium
default via fe80::5a83:c374:2215:148f dev eth1 proto ra metric 100 pref medium这个网关来自于发布公告的本地链路服务器，可也发现与默认网关一样
3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UP group default qlen 1000link/ether 52:54:00:01:fa:0d brd ff:ff:ff:ff:ff:ffinet 192.168.0.220/24 brd 192.168.0.255 scope global dynamic noprefixroute eth1valid_lft 101sec preferred_lft 101secinet6 fde2:6494:1e09:2::d/64 scope global noprefixroute valid_lft forever preferred_lft foreverinet6 fe80::5a83:c374:2215:148f/64 scope link noprefixroute 不使用fe80
开启转发
[root@serverd ~]# sysctl -a | grep forward | grep ipv6
net.ipv6.conf.all.forwarding = 1
改变ipv6地址
fe80::5a83:c374:2215:148f/64ansible 自动化
流程
一：安装包
二：配置文件,notify: jinjia2 纯粹的文件
三： 如果有数据，传数据: web服务：
四： 服务和防火墙
五： handlers ： 通过handlers来触发重新启动服务[student@workstation ~]$ lab dhcp-automation start
获取配置文件与清单文件- name: Deployment DHCPhosts: allbecome: truevars:network_connections:- name: eth1state: uptype: ethernetmac: 52:54:00:01:fa:0aip:address:- 192.168.0.10/24- fde2:6494:1e09:2::a/64tasks:- name: config ip address on dhcpserversinclude_role:name: rhel-system-roles.networkwhen: inventory_hostname == "servera.lab.example.com"- name: install dhcpd packageyum:name: dhcp-serverstate: presentwhen: inventory_hostname == "servera.lab.example.com"- name: prepate dhcp config filecopy:src: files/dhcpd.confdest: /etc/dhcp/dhcpd.confnotify: restart dhcp4when: inventory_hostname == "servera.lab.example.com"- name: prepate dhcp6 config filecopy:src: files/dhcpd6.confdest: /etc/dhcp/dhcpd6.confnotify: restart dhcp6when: inventory_hostname == "servera.lab.example.com"- name: start dhcpd serviceservice:name: "{{ item }}"state: startedenabled: yesloop:- dhcpd- dhcpd6when: inventory_hostname == "servera.lab.example.com"- name: config firewarrdfirewalld:service: "{{ item }}"state: enabledimmediate: yespermanent: yesloop:- dhcp- dhcpv6when: inventory_hostname == "servera.lab.example.com"handlers:- name: restart dhcpservice:name: dhcpdstate: startedwhen: inventory_hostname == "servera.lab.example.com"- name: restart dhcp6service:name: dhcpd6state: startedwhen: inventory_hostname == "servera.lab.example.com"clients:
[student@workstation dhcp-automation]$ cat client.yml
---
- name: Deployment DHCPhosts: clientsbecome: truevars:network_connections:- name: eth1state: uptype: ethernetinterface_name: eth1ip:dhcp4: yesauto6: yestasks:- name: config ip address on dhcpserversinclude_role:name: rhel-system-roles.network
打印机
5.1.1 描述 CUPS 打印架构
打印机由 CUPS 在红帽企业 Linux 中进⾏管理，这是⼀种开源的模块化软件套件，最初由 Easy Software
Products 开发，⽬前由 Apple 领导。CUPS 可以使⽤多个协议与打印机和打印服务器通信。在⼤多数情况下， Internet 打印协议 (IPP)是使⽤
CUPS 与打印机通信的⾸选机制。此协议是对 HTTP/1.1 的修改，它受到⼤多数现代⽹络和 USB 打印机
的本地⽀持，通常使⽤ TCP 端⼝ 631。CUPS 可以⽀持直接连接的打印机（例如，使⽤ 并⾏、串⾏或 USB
通信），并且可以使⽤ LPD 等较旧的⽹络协议。CUPS 提供了⼀组命令⾏⼯具和⼀个 web 界⾯，⽤于管理 CUPS 和提交打印作业。它还提供了⼀个守
护进程 (cupsd)，⽤于管理每个已配置打印机的作业队列。打印机的每个队列都与 PostScript 打 印机描
述 (PPD) ⽂件关联，该⽂件描述了打印机功能以及 CUPS 应如何为作业做好在该打印机上打印的准备。1> 在使用打印机之前，首先要发现并设置打印机
[root@workstation ~]# lab printing-automation start
模拟打印机[root@servera ~]# yum install -y avahi cups-ipptool[root@servera ~]# firewall-cmd --permanent --add-service=mdns
success
[root@servera ~]# firewall-cmd --reload
[root@servera ~]# ippfind -T 30 发现打印机
ipp://serverc.local:631/printers/rht-printer
serverc.local：发现打印机的时候，这个名称client是访问不到的[root@serverc ~]# dig @224.0.0.251 -p 5353 serverc.local#没办法跑到打印机上执行这个命令。
找到地址：172.25.250.12在client反解：[root@servera ~]# dig -x 172.25.250.12
ipp://serverc.local:631/printers/rht-printer替换
ipp://serverc.lab.example.com:631/printers/rht-printer2> 设置打印队列
[root@servera ~]# yum install -y cups
Last metadata expiration check: 0:50:17 ago on Sun 04 Sep 2022 06:39:46 PM CST.
Package cups-1:2.2.6-28.el8.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
[root@servera ~]# systemctl enable --now cups[root@servera ~]# lpadmin -p kevin -v ipp://serverc.lab.example.com:631/printers/rht-printer -m everywhere -E-p： 队列的名字
-v: 打印机的URI
-m： 使用everywhere 这个模块
-E： 可立即启动打印机
[root@servera ~]# lpstat -v查看
device for kevin: ipp://serverc.lab.example.com:631/printers/rht-printer
[root@servera ~]#
-x 删除
[root@servera ~]# lpadmin -d kevin -d 设置默认的队列3> 管理作业
[root@servera ~]# lp /root/anaconda-ks.cfg 默认的队列打印文件[root@servera ~]# lp -d kevin /etc/fstab 通过-d指定打印队列
request id is kevin-8 (1 file(s))[root@servera ~]# cancel kevin-84>队列管理[root@servera ~]# cupsdisable -r "No paper" kevin 暂停，你把作业放到已经暂停打印队列中，他是不会打印的[root@servera ~]# cupsenable kevin[root@servera ~]# cupsreject -r "No Papare" kevin[root@servera ~]# lp /etc/fstab
lp: Destination "kevin" is not accepting jobs.
[root@servera ~]#
[root@servera ~]# cupsaccept kevinansible来管理打印机：问题在于：所有的操作都需要用到command模块来完成：1> 通过ansible来实现的话打印机的URI是事先知道的。[student@workstation printing-auto]$ cat playbook.yml
---
- name: config prineterhosts: clientsbecome: truetasks:- name: installyum:name:- cups-ipptool- cups- avahistate: present- name: start serviceservice:name: "{{ item }}"state: startedenabled: yesloop:- cups- avahi-daemon- name: firewrmdfirewalld:service: mdnspermanent: yesstate: enabledimmediate: yes- name: find printer URicommand: ippfind -T 3register: p_uri- name: set quecommand: lpadmin -p "kevin-{{ index }}" -v "{{ item }}" -m everywhere -Eloop: "{{ p_uri['stdout_lines'] | replace('.local','') }}"loop_control:index_var: index- name: check default que is exitcommand: lpstat -dregister: p_default- name: set default quecommand: lpadmin -d kevin-0when: "'kevin-0' not in p_default['stdout']"[student@workstation printing-auto]$ cat printer-accept.yml
---
- name: Configure a print queue to accept jobshosts: clientsgather_facts: nobecome: yestasks:- name: Confirm the print queue existscommand: lpstat -p kevin-0register: cmdoutignore_errors: truechanged_when: false- name: Tune the print queue to accept jobscommand: cupsenable kevin-0when: cmdout.rc == 0
