I-DNS ne-DHCP kuvuliweSUSE 13.2 "Harlequin" - Amanethiwekhi we-SMB

Inkomba ejwayelekile yochungechunge: Ama-Computer Networks ama-SME: Isingeniso

Inhloso esemqoka yalesi sihloko ukukhombisa ukuthi singayifinyelela kanjani i- Iseva ye-DNS ne-DHCP ku-OpenSUSE ngethuluzi layo elihle lokumisa i-YaST, nakho konke -noma cishe- ngokusebenzisa isikhombimsebenzisi sayo sokuqhafaza.

Sikuthembisa ukufakwa okuphelele nge-graphical interface, ngaphandle -Yonke imithetho inokuhluka kwayo, akunjalo?- of a pair of aduduze ukuhlola ukusebenza kahle pair I-Bind9 + ISC-DHCP-Server, elungiselelwe kusetshenziswa ifayili le- I-YaST - Elinye futhi Ithuluzi Lokusetha okuyiqoqo lamathuluzi amahle kakhulu wokuphathwa kwesoftware nokulungiswa kohlelo.

Insizakalo yokuqala - futhi ebaluleke kakhulu kunqubo yethu yomuntu siqu- okumele yenziwe ku-SME Network, isevisi DNS - DHCP. Uma singafuni ukumisa mathupha imingcele yenethiwekhi yendawo ngayinye yokusebenza, akumele senze ngaphandle kwensizakalo ye-DHCP, njengoba kuchaziwe kamuva. Kukhona nenkonzo yesikhathi noma NTP.

I-DNS: ingemuva

Ngo-Ephreli 2013 sashicilela ku- DesdeLinux uchungechunge lwama-athikili ama-5 anikezelwe ukusebenzisa i-DNS eyinhloko ku-Debian:

• I-Master Master DNS ye-LAN ku-Debian 6.0 (I)
• I-Master Master DNS eyinhloko ye-LAN ku-Debian 6.0 (II)
• I-Master Master DNS ye-LAN ku-Debian 6.0 (III)
• I-Master Master DNS ye-LAN ku-Debian 6.0 (IV)
• I-Master Master DNS ye-LAN ku-Debian 6.0 (V)

Ukuhlanganiswa kwalezi zihloko ezingenhla ngefomethi ye-HTML kwanikelwa ngokulanda.Emuva lapho- Ngokukhishwa kwe-Debian "Squeeze", izincazelo nemiqondo ehlanganiswe kuzo ihlala isebenza ngokugcwele.

Kungakho-ke singeke senze Isingeniso esisemthethweni senkinga ye-DNS. Funda lezo zihloko uma unemibuzo, lapho futhi zinikeza izixhumanisi ezincwadini ezikhethekile ze-DNS.

En vulaSUSE, amafolda namafayela abaluleke kakhulu ahlobene nale nsizakalo yilawa:

• ingobo yomlando /etc/igama.conf
• ifolda /etc/qanjwe ngegama.d
• ingobo yomlando / njll / sysconfig / named
• izinhlelo / usr / sbin / named-checkconf, / usr / sbin / named-checkzone, / usr / sbin / named-compilezone, / usr / sbin / named--printprint
• ifolda / usr / share / doc / package / bind /
• ifolda / var / lib / iqanjwe /
• ifolda / var / lib / okuthiwa / dyn /
• ingobo yomlando /etc/init.d/ eqanjwe igama
• isixhumanisi esingokomfanekiso / usr / sbin / uqanjwe kabusha
  

DHCP

Inhloso yeDynamic Host Configuration Protocol - I-Dynamic Host Configuration Protocol (I-DHCP), ukwabela amapharamitha wokumiswa kwenethiwekhi maphakathi-ngokusebenzisa iseva ye-DHCP- esikhundleni sokumisa ngesandla indawo ngayinye yokusebenza. Ikhompyutha elungiselelwe kusetshenziswa i-DHCP ayinakulawula ikheli layo le-static IP. Le khompyutha yeklayenti ihlelwe ngendlela yokuthi ivumela ukumiswa kwayo kwenethiwekhi ngokuzenzakalela, ngokwemiyalo yeseva.

Insizakalo ye-DHCP yenza impilo ibe lula kubaPhathi beNethiwekhi. Ngokulungiselela iseva ye-DHCP, ungachaza amapharamitha afana negama lesizinda, isango, isikhathi noma iseva yesikhathi, amaseva we-DNS, iseva ye-WINS uma isetshenzisiwe, sakaza ikheli le-IP - ukusakaza, Ikheli le-IP nesifihlakali senethiwekhi yekhompyutha yeklayenti, igama lekhompyutha yeklayenti, neminye imingcele eminingi.

Noma yiziphi izinguquko, ngisho nezinguquko ezinkulu kumapharamitha ahlobene namakheli we-IP nezilungiselelo zenethiwekhi, zingenziwa maphakathi, uma sihlela noma siguqula izilungiselelo zeseva ye-DHCP.

Imvamisa, iseva ye-DHCP igcina irekhodi eliphelele lamakheli we-IP noma ukuqashiswa, futhi imvamisa ipharamitha eyinhloko ikheli le-MAC lekhadi lenethiwekhi ngalinye noma i-NIC - Ikhadi Lokungena Kwenethiwekhi. Ku-OpenSUSE, amakheli we-IP aqashisiwe noma aqashisiwe anikezwe yi-DHCP agcinwa kufayela /var/lib/dhcp/db/dhcpd.leases.

Iphakheji dhcp-doc, efakwe kufolda / usr / share / doc / package / dhcp-doc, inikeza imibhalo emihle kakhulu -ngesiNgisi- mayelana nale nsizakalo.

Ifayela lokumiswa kweseva le-DHCP ngu- /etc/dhcpd.conf. Elinye ifayela lokumiswa kwe-DHCP yi- / njll / sysconfig / dhcpd, futhi kulapho uchaza khona ukuthi iyiphi i-interface yenethiwekhi-noma ukuthi iyiphi i-network interface- iseva ezophendula.

Futhi njengoba siphakathi nendawo i-systemd, futhi sinefayela /usr/lib/systemd/system/dhcpd.service.

Njengoba sethembise ukungasebenzisi i-console, eminye imibuzo sayishiya kubathandi be- bash. Okwerekhodi Ikhonsoli Ayilumi.

iziphakamiso

Noma sithembise ukungasebenzisi i-console ngaphandle kwezikhathi ezimbalwa, siphakamisa sebenzisa imiyalo elandelayo -njengezimpande- ngemuva kokuthi insizakalo ye-DNS - i-DHCP inikeze okungenani ikheli elilodwa le-IP elinamandla, elicabanga ukuthi sebeqedile ukufakwa okuphelele kwazo zombili izinsizakalo futhi basesikhathini samahhala samasheke:

• isimo se-systemctl esinegama.service
• isimo se-systemctl dhcpd.service
• isimo se-systemctl dhcp-server.service
• named-journalprint /var/lib/named/dyn/desdelinux.fanX.jnl

Abagulayo «ingculaza»Sincoma ukuthi ubheke -ikakhulukazi ngezinsuku zezihloko- kumafayela:

• /etc/init.d/ eqanjwe igama
• /etc/init.d/nfs
• /etc/init.d/cifs
• /etc/init.d/rpmconfigcheck

futhi ngokujwayelekile kuwo wonke amafayela akufolda /etc/init.d.

Imibuzo ye-DNS eyenziwe amaklayenti eWindows

Futhi, naku-console, sebenzisa njengomsebenzisi izimpande umyalo:

• iphephabhuku -f

Chitha isikhathi esithile ubuka amaklayenti eWindows ngokuqhubeka ebuza i-DNS yamasayithi angaphandle kwe-Enterprise LAN. Esibonelweni esenziwe kule ndatshana, akekho umqondisi ohlanganisiwe ofakiwe - phambili, ngenjongo ecacile yokubonisa lesi sici sezinhlelo zokusebenza ze-Microsoft® Windows.

I-kernel efaka i-openSUSE ngemvelo yedeskithophu

• Kungokuthanda kwethu ukusebenzisa umnyombo ozinze ngangokunokwenzeka kwifayela le- amaseva. Ngemuva kwalokho siphakamisa inqubo yokukufeza.

Njengoba sikhetha ukufaka nedeskithophu ye-LXDE, vulaSUSE ukufaka ngokuzenzakalela i- «i-kernel-desktop»Kwenzelwe amadeski.

Uma kamuva sifuna ukusebenzisa i-kernel ejwayelekile - i-kernel-defaultKumele siyifake kuphela nge-YaST Package Manager, siqale kabusha isistimu, khetha i- «Izinketho ezithuthukisiwe ze-openSUSE»Esikrinini sasekhaya, bese ukhetha ifayela le- i-kernel-default. Izinhlobo zombili zezinhlamvu ziyefana.

Ekugcineni, kufanele sisuse ifayela le- i-kernel-desktop ngokusebenzisa iMenenja yePhakeji efanayo, kusukela I-GRUB ikubheka njengokuhambisana nesikhathi kune- i-kernel-default, futhi uma ikhona, izohlala ikhetha njengenketho yokuqala. Njengoba singathandi "ukuhlekisa" i I-GRUBSincamela ukususa i-kernel yedeskithophu, ngoba ngeke sisayisebenzisa.

Note: Lapho sisusa uhlelo kusuka ku- i-kernel-desktop, Zonke izinhlobo ezifakiwe zaleyo kernel zisuswa ngokuzenzekelayo. Singayihlola futhi ngokukhetha "Izinketho ezithuthukisiwe ze-OpenSUSE" esikrinini sasekhaya.

Izeluleko ezibalulekile

• Ungaqali ukuzijabulisa kokusebenzisa insizakalo ye-DNS - DHCP nganoma yiluphi uhlelo lokusebenza, ngaphandle kokucacisa kuqala imiqondo eyisisekelo yethiyori. Ngamasevisi abalulekile kunethiwekhi njenge-DNS, amaphutha emiqondo akhokha kakhulu endaweni yokukhiqiza.

Izinsizakalo esingazikhubaza ukonga izinsiza

Ngokusebenzisa imodyuli yeYaST «Service Manager», uma konke ukufakwa sekuphelile futhi ukuze kulondolozwe izinsizakusebenza zehadiwe, singakhubaza uchungechunge lwezinsizakalo, kulokhu, ezingadingekile. Izibonelo:

• izinkomishi: Uhlelo lokuphrinta Uhlelo Oluvamile Lokuphrinta lwe-Unix
• I-lvm2-lvmetad: Imethadatha yedatha yemenenja enengqondo, kuphela uma singasebenzisi imiqulu enengqondo
• I-ModemManager: Imenenja yeModemu

Izifinyezo

Ngiyisitha sokuhumusha, kulungile?

• I-GRUB: i-command console GRfuthi Ui-nified Bi-otloader
• NTP: NEtwork Time Pi-rotocol. Iphrothokholi esetshenziselwe ukuvumelanisa amawashi wamakhompyutha ahlukile ngamanethiwekhi
• I-LAN: Inethiwekhi yendawo - Lwendawo Aimbangela NEtwork
• SPF"Uhlaka lwenqubomgomo yabentwana«. Indlela ye-Anti SPAM evumela iseva yeposi ukuthi iqinisekise ukuthi umsuka we-SMTP uvumelekile ekhelini lokuthumela i-imeyili.
• I-TSIG: Isiginesha Yokuthengiselana - Tukulamula I-SIGnature. Kuchazwe kufayela le- RFC 2845 "Ukufakazela ubuqiniso bokuthengiselana okuyimfihlo kwe-DNS«
• I-UUID: Isikhombi Somhlaba Wonke Esiyingqayizivele - Isikhombi Esihlukile Somhlaba Wonke

Ukufakwa kwezinyathelo ngezinyathelo ngezithombe

Sithathe izikrini ezingama-71 sezizonke ukukhombisa iSinyathelo ngesinyathelo ngokuthembeka ngangokunokwenzeka. Esikrinini ngasinye sokufaka, i-openSUSE yenza lula umsebenzi wethu ngokuba khona kwenkinobho yosizo - Usizo-imvamisa itholakala kwesokunxele esingezansi.

Ngeke sinikeze incazelo yesithombe-skrini ngasinye njengoba sithathwa njengesingafuneki. Njengoba isisho sithi, «Isithombe sibiza amagama ayinkulungwane".

Ukusekelwa kokufakwa

Njengendlela yokufaka singasebenzisa isithombe seDVD esifana naleso ebesisisebenzisa ukwenza lokhu okuthunyelwe ukuvulaSUSE-13.2-DVD-x86_64.iso, noma uhlobo oluthuthuke kakhulu. Uma okokusebenza kungenaso isidlali se-DVD, noma uma kulula ngathi ukusebenzisa imemori - shayela peni, singakwenza njengoba kukhonjisiwe endatshaneni Imemori ene-autostart ukufaka i-Debian, i-CentOS, noma i-OpenSUSE. Ngemuva kokuthi uhlelo lokusebenza selufakiwe, uhlelo lungafakwa futhi lusetshenziselwe ukulungiselela imemori Umbhali wesithombe nguSUSE Studio.

Noma kunjalo siphakamisa test ekuqaleni emshinini obonakalayo.

Ukufaka, ukumenyezelwa kwamakhosombe nokuvuselelwa kwesistimu

• Siphakamisa kwiseva ebonakalayo dns.desdelinux.umlandeli cishe ama-megabyte angama-768 we-RAM kanye ne-hard drive ye-20 GiB. Inkumbulo yingoba sizoyenza ngesibonisi sokuqhafaza.
• Ku Isithombe se-05Mayelana Nokucushwa Kwenethiwekhi, asimemezeli noma iyiphi i-Name Server ngoba lowo msebenzi yiwo okufanele ufakwe. Uma umemezela enye iseva, kuzobhekwa njengesiqondisi kabusha - phambili, futhi sifuna ukusebenzisa insiza ngale ndlela ukubheka ukuphikelela kweMicrosoft® Operating Systems ekufuneni kwabo amasayithi ku-Intanethi.
• Sakha ukumiswa okwenziwe ngezifiso kokwahlukaniswa ngokuya ngokunambitheka kwethu okuthile. Zizwe ukhululekile ukukhetha nokwenza okuthandayo.
• Isithombe se-15: "Izinketho ze-Fstab". Sikhetha ukuthi ukwahlukaniswa kufakwe ngokuya nge-LABEL yabo - LABEL hhayi ngokusho kwe-UUID yayo, okuyindlela yokuzenzakalelayo. Ngemuva kokufaka uhlelo funda okuqukethwe kufayela / njll / fstab.
• Iseva ye-NTP yokuvumelanisa isikhathi ngokunembile yi-Host Hypervisor lapho kusebenza khona iseva ye-DNS - DHCP.
• Ngendlela efanayo nokuthi sikhethe ideskithophu ye-LXDE ngoba ihlangabezana kahle nezidingo zethu, ungakhetha noma iyiphi enye enikezwa isifaki se- vulaSUSE.
• Igama lomsebenzisi okhethiwe «buzz»Ngukuhlonipha ukusatshalaliswa kwethu esikuthandayo. Kepha lutho. 😉
• Ku Isithombe se-22Qaphela ukuthi sivula itheku le-SSH ku-Firewall, futhi sinike amandla insiza ye-SSH.
• Sicela uthathe isikhathi sakho lapho ukhetha isoftware ozoyifaka. IMenenja yePhakeji ebabazekayo, njengoba kukhonjisiwe ku Isithombe se-23.
• Izithombe 35, 36, 37 no-38: Ngemuva kokufaka isistimu yokusebenza kusuka kwi-DVD noma okunye ukwesekwa, into yokuqala okufanele siyenze ukumemezela izinqolobane zokuvuselela uhlelo lwethu, noma ngabe ezasendaweni noma eziku-Intanethi. Esimweni sethu, sikhubaza amakhosombe ahlukene avulwa yi-openSUSE kumaseva awo aku-Intanethi, futhi sengeza okwethu okukhona okwasendaweni. Okungukuthi, sinamakhosombe Database, Packman, Updates, I-Oss y Okungeyona i-Oss, Wanele lo msebenzi ohlongozwayo, futhi usenze ideski ngawo wonke umthetho. 😉
• Izithombe 39 no-40: Iqala futhi iphetha ukuvuselelwa kweMenenja yePhakeji ye- I-YaST. Esikrinini sokuqala sishiya izinketho ezizenzakalelayo. Sichofoze nje inkinobho Faka isicelo.
• Izithombe 41, 42 no-43: Ngemuva kokuthi iMenenja yePhakeji izibuyekeze yona, ivula isikrini ngamaphakeji asuka ohlelweni oluzobuyekezwa. Kuyo, samukela nezinketho ezizenzakalelayo.
• Isithombe se-44: Isikrini esijwayelekile sokuqeda iseshini ku-LXDE.

Ukufaka nokulungiswa kwezinsizakalo ze-DNS ne-DHCP ku-openSUSE

• Isithombe se-47: Masingakhohlwa ukukhiqiza ukhiye oyimfihlo wokuvuselelwa okunamandla kwezindawo ze-DNS, okuyi- desdelinux.umlandeli y 10.168.192.in-addr.habhu.
• Isithombe se-49: Ake sibheke kahle ibhokisi elivela phezulu «Amasethingi endawo desdelinux.umlandeli«. Sivumela ukuvuselelwa okunamandla nokudluliswa kwendawo kwenethiwekhi yendawo akukho okunye.
• Isithombe se-53: Uma sibonisa uhlu «Tipo:»Kumarekhodi e-DNS, sizothola ukuthi singamemezela okulandelayo:
  • A: IPv4 ukuhumusha kwegama lesizinda
  • Be My Valentine : IPv6 ukuhumusha kwegama lesizinda
  • I-CNAME: alias yegama lesizinda
  • NS: iseva yegama
  • MX: ukudluliswa kweposi
  • I-SRV: Irejista yesevisi ye-SRV, esetshenziswa kakhulu ku-Active Directory nakwamanye amasevisi
  • I-TXT: Ukubhaliswa kombhalo
  • SPFUhlaka Lwenqubomgomo Yomthumeli
• Isithombe se-54: i-openSUSE yenza izimpilo zethu zibe lula ngokungadingeki ukuthi simemezele amarekhodi e-DNS ahlehlayo. Sivumela futhi ukuvuselelwa kwendawo eguqukayo eguqukayo nokudluliswa kwendawo kwenethiwekhi yendawo.
• Isithombe se-55: Ngemuva kokuqeda ukucushwa kwe-DNS, akukho okungcono kunokuhlola ukusebenza kwayo nokulungiswa okulungile, ngokusebenzisa imiyalo embalwa elula yekhonsoli.
• Isithombe se-56: Ngaphambi kokumisa i-DHCP, kumele sinikeze isikhombimsebenzisi senethiwekhi esizosikhethela leyo nsizakalo - kungaba yisixhumi esisodwa noma eziningi - iZone ku-Firewall. Sikhetha iNdawo Yangaphakathi eyiLAN yethu.
• Izithombe 61 no-62: Ukumemezela i-DNS enamandla kufanele siye ku- «Ukucushwa Kweseva Yesazi se-DHCP".
• Isithombe se-63: Sikhetha i-subnet bese sichofoza inkinobho «Kuthuthukile«, Bese ukhetha inketho«Ukuphathwa kokhiye we-TSIG".
• Isithombe se-64: Sikhetha ukhiye we-TSIG owenziwe ngesikhathi sokumiswa kwe-DNS. Uma ungazange ukwenze ngaleso sikhathi, ungakwenza manje bese ulungisa kabusha ukuvuselelwa okunamandla kwezindawo ze-DNS ngokhiye okhiqizwe lapha.
• Isithombe se-65: Sibuyela ku-subnet ekhethiwe futhi manje sichofoza inkinobho «Hlela".
• Isithombe se-66: Sikhetha Ibanga lesithakazelo sethu bese uchofoza ku- «I-Dynamic DNS".
• Isithombe se-68: Siqala iqembu vula ideskithophu.desdelinux.umlandeli okuyinto yendatshana yethu elandelayo, leyo esiyifaka futhi siyilungiselele nge dns.desdelinux.umlandeli iyasebenza, futhi sihlola ngemiyalo embalwa elula yekhonsoli, ukuthi i-DHCP ivuselele kahle i-DNS, nokuthi amarekhodi okudlulisa nokubuyela emuva e-DNS yalelo klayenti abuyisiwe.

Sijoyine ku-adventure elandelayo!