湖濱散記部落格的樹心幽徑[<a href=login.php>login</a>][<a href= . >主頁</a>]<hr>
247:20120830為教室nat連網伺服器安裝dhcpd自動組態伺服程式並設定NAT及crontab<br><table width=800 border=8><tr><td bgcolor=cyan><p><span style="background-color: #ffff00; color: #000000;">(1)yum -y install dhcp</span></p>
<p>[webadm@nat1 ~]$ su<br />密碼：<br />[root@nat1 webadm]# yum -y install dhcp<br />Loaded plugins: langpacks, presto, refresh-packagekit<br />Resolving Dependencies<br />--&gt; Running transaction check<br />---&gt; Package dhcp.i686 12:4.2.4-9.P1.fc17 will be installed<br />--&gt; Processing Dependency: dhcp-libs(x86-32) = 12:4.2.4-9.P1.fc17 for package: 12:dhcp-4.2.4-9.P1.fc17.i686<br />--&gt; Processing Dependency: dhcp-common = 12:4.2.4-9.P1.fc17 for package: 12:dhcp-4.2.4-9.P1.fc17.i686<br />--&gt; Running transaction check<br />---&gt; Package dhcp-common.i686 12:4.2.4-0.4.rc1.fc17 will be updated<br />--&gt; Processing Dependency: dhcp-common = 12:4.2.4-0.4.rc1.fc17 for package: 12:dhclient-4.2.4-0.4.rc1.fc17.i686<br />---&gt; Package dhcp-common.i686 12:4.2.4-9.P1.fc17 will be an update<br />---&gt; Package dhcp-libs.i686 12:4.2.4-0.4.rc1.fc17 will be updated<br />---&gt; Package dhcp-libs.i686 12:4.2.4-9.P1.fc17 will be an update<br />--&gt; Running transaction check<br />---&gt; Package dhclient.i686 12:4.2.4-0.4.rc1.fc17 will be updated<br />---&gt; Package dhclient.i686 12:4.2.4-9.P1.fc17 will be an update<br />--&gt; Finished Dependency Resolution<br /><br />Dependencies Resolved<br /><br />================================================================================<br />&nbsp;Package&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Arch&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Version&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Repository&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Size<br />================================================================================<br />Installing:<br />&nbsp;dhcp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; updates&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 490 k<br />Updating for dependencies:<br />&nbsp;dhclient&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; updates&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 262 k<br />&nbsp;dhcp-common&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; updates&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 163 k<br />&nbsp;dhcp-libs&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; updates&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 130 k<br /><br />Transaction Summary<br />================================================================================<br />Install&nbsp; 1 Package<br />Upgrade&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ( 3 Dependent packages)<br /><br />Total download size: 1.0 M<br />Downloading Packages:<br />Setting up and reading Presto delta metadata<br />http://ftp.jaist.ac.jp/pub/Linux/Fedora/updates/17/i386/dhclient-4.2.4-9.P1.fc17.i686.rpm: [Errno 14] curl#6 - "Couldn't resolve host"<br />Trying other mirror.<br />(1/4): dhclient-4.2.4-9.P1.fc17.i686.rpm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | 262 kB&nbsp;&nbsp;&nbsp;&nbsp; 00:30&nbsp;&nbsp;&nbsp;&nbsp; <br />警告：rpmts_HdrFromFdno: 表頭 V3 RSA/SHA256 Signature, key ID 1aca3465: NOKEY<br />Public key for dhclient-4.2.4-9.P1.fc17.i686.rpm is not installed<br />(2/4): dhcp-4.2.4-9.P1.fc17.i686.rpm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | 490 kB&nbsp;&nbsp;&nbsp;&nbsp; 00:20&nbsp;&nbsp;&nbsp;&nbsp; <br />(3/4): dhcp-common-4.2.4-9.P1.fc17.i686.rpm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | 163 kB&nbsp;&nbsp;&nbsp;&nbsp; 00:04&nbsp;&nbsp;&nbsp;&nbsp; <br />(4/4): dhcp-libs-4.2.4-9.P1.fc17.i686.rpm&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; | 130 kB&nbsp;&nbsp;&nbsp;&nbsp; 00:28&nbsp;&nbsp;&nbsp;&nbsp; <br />--------------------------------------------------------------------------------<br />Total&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 10 kB/s | 1.0 MB&nbsp;&nbsp;&nbsp;&nbsp; 01:40&nbsp;&nbsp;&nbsp;&nbsp; <br />Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-i386<br />Importing GPG key 0x1ACA3465:<br />&nbsp;Userid&nbsp;&nbsp;&nbsp;&nbsp; : "Fedora (17) &lt;fedora@fedoraproject.org&gt;"<br />&nbsp;Fingerprint: cac4 3fb7 74a4 a673 d81c 5de7 50e9 4c99 1aca 3465<br />&nbsp;Package&nbsp;&nbsp;&nbsp; : fedora-release-17-1.noarch (@anaconda-0)<br />&nbsp;From&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; : /etc/pki/rpm-gpg/RPM-GPG-KEY-fedora-i386<br />Running Transaction Check<br />Running Transaction Test<br />Transaction Test Succeeded<br />Running Transaction<br />&nbsp; Updating&nbsp;&nbsp; : 12:dhcp-libs-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1/7 <br />&nbsp; Updating&nbsp;&nbsp; : 12:dhcp-common-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2/7 <br />&nbsp; Installing : 12:dhcp-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3/7 <br />&nbsp; Updating&nbsp;&nbsp; : 12:dhclient-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 4/7 <br />&nbsp; Cleanup&nbsp;&nbsp;&nbsp; : 12:dhclient-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5/7 <br />&nbsp; Cleanup&nbsp;&nbsp;&nbsp; : 12:dhcp-common-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 6/7 <br />&nbsp; Cleanup&nbsp;&nbsp;&nbsp; : 12:dhcp-libs-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7/7 <br />&nbsp; Verifying&nbsp; : 12:dhcp-common-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 1/7 <br />&nbsp; Verifying&nbsp; : 12:dhcp-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 2/7 <br />&nbsp; Verifying&nbsp; : 12:dhclient-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 3/7 <br />&nbsp; Verifying&nbsp; : 12:dhcp-libs-4.2.4-9.P1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 4/7 <br />&nbsp; Verifying&nbsp; : 12:dhcp-libs-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 5/7 <br />&nbsp; Verifying&nbsp; : 12:dhclient-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 6/7 <br />&nbsp; Verifying&nbsp; : 12:dhcp-common-4.2.4-0.4.rc1.fc17.i686&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 7/7 <br /><br />Installed:<br />&nbsp; dhcp.i686 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><br />Dependency Updated:<br />&nbsp; dhclient.i686 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; dhcp-common.i686 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp; <br />&nbsp; dhcp-libs.i686 12:4.2.4-9.P1.fc17&nbsp;&nbsp;&nbsp; <br /><br />Complete!<br />[root@nat1 webadm]# <br /><br /><br /><span style="background-color: #ffff00; color: #000000;">(2)修改/etc/dhcp/dhcpd.conf</span><br />[root@nat1 webadm]# vi /etc/dhcp/dhcpd.conf<br />[root@nat1 webadm]# cat /etc/dhcp/dhcpd.conf<br />#<br /># DHCP Server Configuration file.<br />#&nbsp;&nbsp; see /usr/share/doc/dhcp*/dhcpd.conf.sample<br />#&nbsp;&nbsp; see dhcpd.conf(5) man page<br />#<br />option domain-name "kmvs.km.edu.tw";<br /><br />option domain-name-servers dns.kmvs.km.edu.tw;<br />default-lease-time 600;<br />max-lease-time 7200;<br /><br />authoritative;<br /><br />subnet 10.1.1.0 netmask 255.255.255.0 {<br />range dynamic-bootp 10.1.1.200 10.1.1.254;<br />option broadcast-address 10.1.1.255;<br />option routers 10.1.1.254;<br />} <br /><br />[root@nat1 webadm]# <br /><br /><br /><span style="background-color: #ffff00;">(3)啟動dhcpd.service</span><br />[root@nat1 webadm]# systemctl start dhcpd.service<br />[root@nat1 webadm]# systemctl enable dhcpd.service<br />ln -s '/usr/lib/systemd/system/dhcpd.service' '/etc/systemd/system/multi-user.target.wants/dhcpd.service'<br />[root@nat1 webadm]# ps ax|grep dhcp<br />&nbsp; 705 ?&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; S&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0:00 /sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override<br />&nbsp;3290 ?&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Sl&nbsp;&nbsp;&nbsp;&nbsp; 0:05 gedit /home/webadm/20120830dhcpd_setup.txt<br />&nbsp;5048 pts/0&nbsp;&nbsp;&nbsp; S+&nbsp;&nbsp;&nbsp;&nbsp; 0:00 grep --color=auto dhcp<br />[root@nat1 webadm]# <br /><br /><br /><span style="background-color: #ffff00; color: #000000;">(4)察看</span><br /><br />[root@nat1 webadm]# whereis dhcpd<br />dhcpd: /sbin/dhcpd /usr/sbin/dhcpd /usr/share/man/man8/dhcpd.8.gz<br />[root@nat1 webadm]# /sbin/dhcpd &amp;<br />[1] 5057<br />[root@nat1 webadm]# Internet Systems Consortium DHCP Server 4.2.4-P1<br />Copyright 2004-2012 Internet Systems Consortium.<br />All rights reserved.<br />For info, please visit https://www.isc.org/software/dhcp/<br />Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file<br />Wrote 0 leases to leases file.<br /><br />No subnet declaration for virbr0 (192.168.122.1).<br />** Ignoring requests on virbr0.&nbsp; If this is not what<br />&nbsp;&nbsp; you want, please write a subnet declaration<br />&nbsp;&nbsp; in your dhcpd.conf file for the network segment<br />&nbsp;&nbsp; to which interface virbr0 is attached. **<br /><br /><br />No subnet declaration for eth1 (no IPv4 addresses).<br />** Ignoring requests on eth1.&nbsp; If this is not what<br />&nbsp;&nbsp; you want, please write a subnet declaration<br />&nbsp;&nbsp; in your dhcpd.conf file for the network segment<br />&nbsp;&nbsp; to which interface eth1 is attached. **<br /><br /><br />No subnet declaration for eth0 (163.25.20.37).<br />** Ignoring requests on eth0.&nbsp; If this is not what<br />&nbsp;&nbsp; you want, please write a subnet declaration<br />&nbsp;&nbsp; in your dhcpd.conf file for the network segment<br />&nbsp;&nbsp; to which interface eth0 is attached. **<br /><br /><br />Not configured to listen on any interfaces!<br /><br />This version of ISC DHCP is based on the release available<br />on ftp.isc.org.&nbsp; Features have been added and other changes<br />have been made to the base software release in order to make<br />it work better with this distribution.<br /><br />Please report for this software via the Red Hat Bugzilla site:<br />&nbsp;&nbsp;&nbsp; http://bugzilla.redhat.com<br /><br />exiting.<br /><br />[1]+&nbsp; Exit 1&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /sbin/dhcpd<br />[root@nat1 webadm]# <br /><br /><br /><span style="background-color: #ffff00; color: #000000;">(5)system-config-network-tui</span></p>
<p><br />[root@nat1 network-scripts]# system-config-network-tui<br />[root@nat1 network-scripts]# system-config-network-tui<br />[root@nat1 network-scripts]# /etc/rc.d/init.d/network start<br />Starting network (via systemctl):&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; [&nbsp; 確定&nbsp; ]<br />[root@nat1 network-scripts]# ifconfig<br />eth0: flags=4163&lt;UP,BROADCAST,RUNNING,MULTICAST&gt;&nbsp; mtu 1500<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 163.25.20.37&nbsp; netmask 255.255.255.0&nbsp; broadcast 163.25.20.255<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet6 fe80::224:8cff:fec9:1327&nbsp; prefixlen 64&nbsp; scopeid 0x20&lt;link&gt;<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ether 00:24:8c:c9:13:27&nbsp; txqueuelen 1000&nbsp; (Ethernet)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX packets 128737&nbsp; bytes 29111894 (27.7 MiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX errors 0&nbsp; dropped 3204&nbsp; overruns 0&nbsp; frame 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX packets 15063&nbsp; bytes 1124936 (1.0 MiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX errors 0&nbsp; dropped 0 overruns 0&nbsp; carrier 0&nbsp; collisions 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; device interrupt 43&nbsp; base 0x6000&nbsp; <br /><br />eth1: flags=4163&lt;UP,BROADCAST,RUNNING,MULTICAST&gt;&nbsp; mtu 1500<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 10.1.1.254&nbsp; netmask 255.255.255.0&nbsp; broadcast 10.1.1.255<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet6 fe80::223:f8ff:fe5f:4fa3&nbsp; prefixlen 64&nbsp; scopeid 0x20&lt;link&gt;<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ether 00:23:f8:5f:4f:a3&nbsp; txqueuelen 1000&nbsp; (Ethernet)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX packets 6&nbsp; bytes 1770 (1.7 KiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX errors 0&nbsp; dropped 0&nbsp; overruns 0&nbsp; frame 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX packets 2279&nbsp; bytes 481394 (470.1 KiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX errors 0&nbsp; dropped 0 overruns 0&nbsp; carrier 0&nbsp; collisions 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; device interrupt 19&nbsp; base 0x8c00&nbsp; <br /><br />lo: flags=73&lt;UP,LOOPBACK,RUNNING&gt;&nbsp; mtu 16436<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 127.0.0.1&nbsp; netmask 255.0.0.0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet6 ::1&nbsp; prefixlen 128&nbsp; scopeid 0x10&lt;host&gt;<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; loop&nbsp; txqueuelen 0&nbsp; (Local Loopback)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX packets 108&nbsp; bytes 8440 (8.2 KiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX errors 0&nbsp; dropped 0&nbsp; overruns 0&nbsp; frame 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX packets 108&nbsp; bytes 8440 (8.2 KiB)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX errors 0&nbsp; dropped 0 overruns 0&nbsp; carrier 0&nbsp; collisions 0<br /><br />virbr0: flags=4099&lt;UP,BROADCAST,MULTICAST&gt;&nbsp; mtu 1500<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; inet 192.168.122.1&nbsp; netmask 255.255.255.0&nbsp; broadcast 192.168.122.255<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ether c2:c8:08:47:60:71&nbsp; txqueuelen 0&nbsp; (Ethernet)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX packets 0&nbsp; bytes 0 (0.0 B)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; RX errors 0&nbsp; dropped 0&nbsp; overruns 0&nbsp; frame 0<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX packets 0&nbsp; bytes 0 (0.0 B)<br />&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TX errors 0&nbsp; dropped 0 overruns 0&nbsp; carrier 0&nbsp; collisions 0<br /><br /><span style="background-color: #ffff00; color: #000000;">(6)再啟動dhcpd</span></p>
<p><br />[root@nat1 network-scripts]# <br />[root@nat1 network-scripts]# dhcpd<br />Internet Systems Consortium DHCP Server 4.2.4-P1<br />Copyright 2004-2012 Internet Systems Consortium.<br />All rights reserved.<br />For info, please visit https://www.isc.org/software/dhcp/<br />Not searching LDAP since ldap-server, ldap-port and ldap-base-dn were not specified in the config file<br />Wrote 0 leases to leases file.<br /><br />No subnet declaration for virbr0 (192.168.122.1).<br />** Ignoring requests on virbr0.&nbsp; If this is not what<br />&nbsp;&nbsp; you want, please write a subnet declaration<br />&nbsp;&nbsp; in your dhcpd.conf file for the network segment<br />&nbsp;&nbsp; to which interface virbr0 is attached. **<br /><br />Listening on LPF/eth1/00:23:f8:5f:4f:a3/10.1.1.0/24<br />Sending on&nbsp;&nbsp; LPF/eth1/00:23:f8:5f:4f:a3/10.1.1.0/24<br /><br />No subnet declaration for eth0 (163.25.20.37).<br />** Ignoring requests on eth0.&nbsp; If this is not what<br />&nbsp;&nbsp; you want, please write a subnet declaration<br />&nbsp;&nbsp; in your dhcpd.conf file for the network segment<br />&nbsp;&nbsp; to which interface eth0 is attached. **<br /><br />Sending on&nbsp;&nbsp; Socket/fallback/fallback-net<br />[root@nat1 network-scripts]# <br /><br /><span style="background-color: #ffff00; color: #000000;">(7)啟動iptables 的nat功能</span><br />[root@nat1 network-scripts]# iptables -F<br />[root@nat1 network-scripts]# echo "1" /proc/sys/net/ipv4/ip_forward<br />1 /proc/sys/net/ipv4/ip_forward<br />[root@nat1 network-scripts]# modprobe ip_nat_ftp<br />[root@nat1 network-scripts]# modprobe ip_nat_irc<br />[root@nat1 network-scripts]# iptables -t nat -A POSTROUTING -s 10.1.1.0/24 -j MASQUERADE<br />[root@nat1 network-scripts]# <br /><br /><br /><span style="color: #000000; background-color: #ffff00;">(8)編寫 startnat 執行指令稿</span><br /><br />[root@nat1 webadm]# cd ~root<br /><br /><br />[root@nat1 ~]# ps ax|grep dhcpd<br />&nbsp;1056 ?&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Ss&nbsp;&nbsp;&nbsp;&nbsp; 0:00 /usr/sbin/dhcpd -f -cf /etc/dhcp/dhcpd.conf -user dhcpd -group dhcpd --no-pid<br />&nbsp;1979 pts/0&nbsp;&nbsp;&nbsp; S+&nbsp;&nbsp;&nbsp;&nbsp; 0:00 grep --color=auto dhcpd<br /><br />[root@nat1 ~]# vi startnat <br /><br />[root@nat1 ~]# cat ./startnat <br />iptables -F<br />echo "1" /proc/sys/net/ipv4/ip_forward<br />modprobe ip_nat_ftp<br />modprobe ip_nat_irc<br />modprobe ip_conntrack_ftp<br />modprobe ip_conntrack_irc<br /><br />iptables -t nat -A POSTROUTING -o eth0 -s 10.1.1.0/24&nbsp; -j MASQUERADE<br /><br />[root@nat1 ~]# <br /><br />[root@nat1 ~]# cd ~root<br />[root@nat1 ~]# ./startnat <br />1 /proc/sys/net/ipv4/ip_forward<br />&nbsp;&nbsp;&nbsp; <br />[root@nat1 ~]# iptables -t nat -L<br />Chain PREROUTING (policy ACCEPT)<br />target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><br />Chain INPUT (policy ACCEPT)<br />target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><br />Chain OUTPUT (policy ACCEPT)<br />target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><br />Chain POSTROUTING (policy ACCEPT)<br />target&nbsp;&nbsp;&nbsp;&nbsp; prot opt source&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; destination&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br />MASQUERADE&nbsp; tcp&nbsp; --&nbsp; 192.168.122.0/24&nbsp;&nbsp;&nbsp; !192.168.122.0/24&nbsp;&nbsp;&nbsp;&nbsp; masq ports: 1024-65535<br />MASQUERADE&nbsp; udp&nbsp; --&nbsp; 192.168.122.0/24&nbsp;&nbsp;&nbsp; !192.168.122.0/24&nbsp;&nbsp;&nbsp;&nbsp; masq ports: 1024-65535<br />MASQUERADE&nbsp; all&nbsp; --&nbsp; 192.168.122.0/24&nbsp;&nbsp;&nbsp; !192.168.122.0/24&nbsp;&nbsp;&nbsp; <br />MASQUERADE&nbsp; all&nbsp; --&nbsp; 10.1.1.0/24&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; anywhere&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <br /><br /><span style="color: #000000; background-color: #ffff00;">(9)編寫 </span>crontab</p>
<p>[root@nat1 ~]# crontab -l<br />59 7 * * * ifup eth1<br />0 17 * * * ifdown eth1<br />[root@nat1 ~]# <br /><br />[root@nat1 ~]# cat /etc/crontab<br />SHELL=/bin/bash<br />PATH=/sbin:/bin:/usr/sbin:/usr/bin<br />MAILTO=root<br /><br /># For details see man 4 crontabs<br /><br /># Example of job definition:<br /># .---------------- minute (0 - 59)<br /># |&nbsp; .------------- hour (0 - 23)<br /># |&nbsp; |&nbsp; .---------- day of month (1 - 31)<br /># |&nbsp; |&nbsp; |&nbsp; .------- month (1 - 12) OR jan,feb,mar,apr ...<br /># |&nbsp; |&nbsp; |&nbsp; |&nbsp; .---- day of week (0 - 6) (Sunday=0 or 7) OR sun,mon,tue,wed,thu,fri,sat<br /># |&nbsp; |&nbsp; |&nbsp; |&nbsp; |<br /># *&nbsp; *&nbsp; *&nbsp; *&nbsp; * user-name&nbsp; command to be executed<br />59 7 * * * root /sbin/ifup eth1<br />0 17 * * * root /sbin/ifdown eth1<br />55 17 * * * root /sbin/ifdown eth1<br />[root@nat1 ~]# <br /><br /><br /><br /><br /></p></table><br> select id,article_id,topic,text from lt_articles_text where article_id =247; ok.
update lt_articles set num_reads=num_reads +1 where id=247; ok.