絡(luò)配置與管理全流程，新手也能秒會(huì))
CentOS 7.9 網(wǎng)絡(luò)配置與管理全流程新手也能秒會(huì)Centos 7.9網(wǎng)絡(luò)管理詳解摘要一、查看網(wǎng)絡(luò)配置1.查看 link2.查看 IP3.查看 route4.查看dns二、測(cè)試網(wǎng)絡(luò)連通性1.ping 測(cè)試2.mtr 路由跟蹤3.ss工具三、配置網(wǎng)絡(luò)1.環(huán)境準(zhǔn)備1.對(duì)于 vmware workstations#服務(wù)中VMware DHCP 需要正在運(yùn)行2.右上角第二個(gè)圖標(biāo)可以直接回到主頁。3.點(diǎn)擊編輯虛擬機(jī)設(shè)置4.進(jìn)入此頁面點(diǎn)擊下方的添加彈出添加硬件頁面選擇網(wǎng)絡(luò)適配器點(diǎn)擊完成確定即可。5.添加后效果。2.nmtui 命令1.自動(dòng)配置2.手動(dòng)配置3.nmcli 命令1.網(wǎng)絡(luò)啟停2.設(shè)備控制3.動(dòng)態(tài)獲取4.靜態(tài)配置5.其他操作4.網(wǎng)絡(luò)配置文件Centos 7.9網(wǎng)絡(luò)管理詳解摘要本文詳細(xì)介紹了在 CentOS 7.9 系統(tǒng)中進(jìn)行網(wǎng)絡(luò)管理的完整流程與實(shí)用命令。主要內(nèi)容包括網(wǎng)絡(luò)配置查看使用ip、route、cat /etc/resolv.conf等命令查看網(wǎng)卡、IP地址、路由和DNS配置。網(wǎng)絡(luò)連通性測(cè)試通過ping、mtr測(cè)試網(wǎng)絡(luò)連通性與路由追蹤使用ss工具查看端口占用和網(wǎng)絡(luò)連接狀態(tài)。網(wǎng)絡(luò)配置方法圖形化工具使用nmtui進(jìn)行交互式配置自動(dòng)獲取與手動(dòng)設(shè)置。命令行工具使用nmcli進(jìn)行網(wǎng)絡(luò)啟停、設(shè)備控制、連接管理并演示了動(dòng)態(tài)獲取DHCP與靜態(tài)配置IP地址的具體步驟。配置文件介紹了網(wǎng)絡(luò)配置文件/etc/sysconfig/network-scripts/ifcfg-*與路由文件的存放位置及手動(dòng)修改后的生效方法。文章通過大量實(shí)際命令示例與截圖系統(tǒng)性地講解了從網(wǎng)絡(luò)狀態(tài)檢查、問題診斷到配置管理的全過程適用于系統(tǒng)管理員和運(yùn)維人員參考。一、查看網(wǎng)絡(luò)配置1.查看 link# 查看網(wǎng)絡(luò)設(shè)備清單關(guān)注mac地址.[lzserver ~17:14:38]$ip-brlinklo UNKNOWN 00:00:00:00:00:00LOOPBACK,UP,LOWER_UPens33 UP 00:0c:29:bb:c6:bcBROADCAST,MULTICAST,UP,LOWER_UP# 查看單個(gè)網(wǎng)絡(luò)設(shè)備信息.[lzserver ~17:14:45]$iplinkshow ens332: ens33:BROADCAST,MULTICAST,UP,LOWER_UPmtu1500qdisc pfifo_fast state UP mode DEFAULT group default qlen1000link/ether 00:0c:29:bb:c6:bc brd ff:ff:ff:ff:ff:ff2.查看 IP#關(guān)注IP地址和掩碼位數(shù)10.1.8.10/24.[lzserver ~17:14:55]$ip-bra lo UNKNOWN127.0.0.1/8 ::1/128 ens33 UP10.1.8.10/24 fe80::a552:389:2e84:bb76/64[lzserver ~17:16:30]$ipaddr show ens332: ens33:BROADCAST,MULTICAST,UP,LOWER_UPmtu1500qdisc pfifo_fast state UP group default qlen1000link/ether 00:0c:29:bb:c6:bc brd ff:ff:ff:ff:ff:ff inet10.1.8.10/24 brd10.1.8.255 scope global noprefixroute ens33 valid_lft forever preferred_lft forever inet6 fe80::a552:389:2e84:bb76/64 scopelinknoprefixroute valid_lft forever preferred_lft forever3.查看 route#default代表主機(jī)的網(wǎng)關(guān).[lzserver ~17:17:06]$iproute default via10.1.8.2 dev ens33 proto static metric10010.1.8.0/24 dev ens33 proto kernel scopelinksrc10.1.8.10 metric100# 還可以使用以下命令,前提有net-tools.#普通用戶權(quán)限不夠可以root用戶下執(zhí)行.[lzserver ~17:19:39]$ yuminstall-ynet-tools 已加載插件fastestmirror 您需要 root 權(quán)限執(zhí)行此命令。[lzserver ~17:20:27]$su- 密碼 上一次登錄五5月1517:10:41 CST2026從10.1.8.1pts/0 上[rootserver ~17:20:38]# yum install -y net-tools已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com...[lzserver ~17:25:30]$ route-nKernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface0.0.0.010.1.8.20.0.0.0 UG10000ens3310.1.8.00.0.0.0255.255.255.0 U10000ens33#或者[lzserver ~17:25:39]$netstat-nrKernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface0.0.0.010.1.8.20.0.0.0 UG000ens3310.1.8.00.0.0.0255.255.255.0 U000ens334.查看dns[lzserver ~17:25:51]$cat/etc/resolv.conf# Generated by NetworkManagersearch lz.cloud nameserver223.5.5.5 nameserver223.6.6.6二、測(cè)試網(wǎng)絡(luò)連通性1.ping 測(cè)試# ping 測(cè)試選項(xiàng)-c控制ping次數(shù)選項(xiàng)-w控制ping超時(shí)時(shí)間[lzserver ~17:29:47]$pingwww.baidu.com-c4-w5PING www.a.shifen.com(180.101.49.44)56(84)bytes of data.64bytes from180.101.49.44(180.101.49.44):icmp_seq1ttl128time74.6ms64bytes from180.101.49.44(180.101.49.44):icmp_seq2ttl128time120ms64bytes from180.101.49.44(180.101.49.44):icmp_seq3ttl128time92.7ms64bytes from180.101.49.44(180.101.49.44):icmp_seq4ttl128time103ms --- www.a.shifen.compingstatistics ---4packets transmitted,4received,0% packet loss,time3004ms rtt min/avg/max/mdev74.651/97.823/120.707/16.693 ms# 說明# 1- 能夠解析出ip 說明DNS配置正確# 2- 能ping 通說明我們的網(wǎng)關(guān)配置正確2.mtr 路由跟蹤# ping 主機(jī)不通此時(shí)跟蹤路由查看數(shù)據(jù)最遠(yuǎn)到達(dá)的位置[rootserver ~17:30:17]# yum install -y mtr已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com[lzserver ~17:32:38]$mtr-n1.1.1.13.ss工具#/etc/services 文件存儲(chǔ)常見端口和服務(wù)對(duì)應(yīng)關(guān)系。[lzserver ~17:38:03]$vim/etc/services... ftp-data20/tcp ftp-data20/udp# 21 is registered to ftp, but also used by fspftp21/tcpftp21/udp fsp fspdssh22/tcp# The Secure Shell (SSH) Protocolssh22/udp# The Secure Shell (SSH) Protocoltelnet23/tcp telnet23/udp... domain53/tcp# name-domain serverdomain53/udp... http80/tcp www www-http# WorldWideWeb HTTPhttp80/udp www www-http# HyperText Transfer Protocol... https443/tcp# http protocol over TLS/SSLhttps443/udp# http protocol over TLS/SSL...ss 命令用于查看系統(tǒng)中網(wǎng)絡(luò)狀態(tài)信息。以前使用 netstat 查看網(wǎng)絡(luò)狀態(tài)信息使用方法等效與 ss 命令。# 默認(rèn)顯示是 ESTAB 狀態(tài).[lzserver ~17:38:03]$ ss|grep:ssh tcp ESTAB03610.1.8.10:ssh10.1.8.1:dyna-lm tcp ESTAB0010.1.8.10:ssh10.1.8.1:51122# 只看 LISTEN包含IPv4和IPv6.[lzserver ~17:40:03]$ ss-l|grep:ssh tcp LISTEN0128*:ssh *:* tcp LISTEN0128[::]:ssh[::]:*# 查看 ipv4 所有LISTEN和ESTAB網(wǎng)絡(luò)狀態(tài).[lzserver ~17:41:12]$ ss -a4|grep:ssh tcp LISTEN0128*:ssh *:* tcp ESTAB03610.1.8.10:ssh10.1.8.1:dyna-lm tcp ESTAB0010.1.8.10:ssh10.1.8.1:51122# -n 將服務(wù)的名稱顯示為數(shù)字.[lzserver ~17:41:46]$ ss -an4|grep:22 tcp LISTEN0128*:22 *:* tcp ESTAB03610.1.8.10:2210.1.8.1:3395 tcp ESTAB0010.1.8.10:2210.1.8.1:51122# -p 顯示相應(yīng)的進(jìn)程.[lzserver ~17:42:19]$ ss -lnp4|grep:22 tcp LISTEN0128*:22 *:*模擬環(huán)境[rootserver ~17:39:03]# yum install -y nginx已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com 正在解決依賴關(guān)系...[rootserver ~17:44:21]# systemctl start nginx.service[rootserver ~17:45:42]# echo Hello World zheng /usr/share/nginx/html/index.html[rootserver ~17:46:24]# curl http://10.1.8.10Hello World zheng[rootserver ~17:46:39]# yum install -y httpd已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com 正在解決依賴關(guān)系 --正在檢查事務(wù) ---軟件包 httpd.x86_64.0.2.4.6-99.el7.centos.1 將被 安裝...[rootserver ~17:46:54]# systemctl start httpdJobforhttpd.service failed because the control process exited with error code. Seesystemctl status httpd.serviceandjournalctl -xefordetails.[rootserver ~17:47:31]# systemctl status httpd.service|grep use5月1517:47:31 server.lz.cloud httpd[11604]:(98)Address alreadyinuse: AH00072: make_sock: could notbindto address[::]:805月1517:47:31 server.lz.cloud httpd[11604]:(98)Address alreadyinuse: AH00072: make_sock: could notbindto address0.0.0.0:80#查找端口被哪個(gè)程序使用.[rootserver ~17:47:50]# ss -lnp4|grep :80tcp LISTEN0128*:80 *:* users:((nginx,pid11551,fd6),(nginx,pid11550,fd6),(nginx,pid11549,fd6))#解決方法.[rootserver ~17:48:04]# systemctl stop nginx[rootserver ~17:49:05]# systemctl start httpd[rootserver ~17:49:14]# systemctl status httpd● httpd.service - The Apache HTTP Server Loaded: loaded(/usr/lib/systemd/system/httpd.service;disabled;vendor preset: disabled)Active: active(running)since 五2026-05-1517:49:14 CST;11s ago Docs: man:httpd(8)man:apachectl(8)Main PID:11627(httpd)Status:Total requests: 0; Current requests/sec: 0; Current traffic: 0 B/secCGroup: /system.slice/httpd.service ├─11627 /usr/sbin/httpd-DFOREGROUND├─11628 /usr/sbin/httpd-DFOREGROUND├─11629 /usr/sbin/httpd-DFOREGROUND├─11630 /usr/sbin/httpd-DFOREGROUND├─11631 /usr/sbin/httpd-DFOREGROUND└─11632 /usr/sbin/httpd-DFOREGROUND5月1517:49:14 server.lz.cloud systemd[1]: Starting The Apache HTTP Server...5月1517:49:14 server.lz.cloud systemd[1]: Started The Apache HTTP Server.三、配置網(wǎng)絡(luò)網(wǎng)絡(luò)配置是由 NetworkManager 服務(wù)管理的確保該服務(wù)開機(jī)自啟。1.環(huán)境準(zhǔn)備虛擬機(jī)新增加一個(gè)NAT網(wǎng)卡。自動(dòng)獲取的前提條件是直連的網(wǎng)絡(luò)中有dhcp服務(wù)器。1.對(duì)于 vmware workstations#服務(wù)中VMware DHCP 需要正在運(yùn)行2.右上角第二個(gè)圖標(biāo)可以直接回到主頁。3.點(diǎn)擊編輯虛擬機(jī)設(shè)置4.進(jìn)入此頁面點(diǎn)擊下方的添加彈出添加硬件頁面選擇網(wǎng)絡(luò)適配器點(diǎn)擊完成確定即可。5.添加后效果。2.nmtui 命令1.自動(dòng)配置# 服務(wù)器配置[rootserver ~17:49:25]# nmtui使用上下鍵、tab進(jìn)行移動(dòng)回車選中條目。2.手動(dòng)配置思考什么情況下用自動(dòng)配置和手動(dòng)配置? 自動(dòng)配置無靜態(tài)IP地址需求的其他情況。例如辦公環(huán)境員工的電腦公共場(chǎng)所無線。? 手動(dòng)配置需要一個(gè)靜態(tài)IP地址例如對(duì)外提供服務(wù)的數(shù)據(jù)庫服務(wù)器需要一個(gè)靜態(tài)的IP地址。3.nmcli 命令1.網(wǎng)絡(luò)啟停# 停用網(wǎng)絡(luò)并不會(huì)停止 NetworkManager 服務(wù)。[rootserver ~17:59:28]# nmcli networking off# 網(wǎng)卡狀態(tài)變化activated - deactivating - disconnected - unmanaged - unavailable# 啟用網(wǎng)絡(luò)[rootserver ~18:00:44]# nmcli networking on# 網(wǎng)卡狀態(tài)變化unavailable - disconnected - auto-activating2.設(shè)備控制DEVICE是設(shè)備也就是網(wǎng)卡。CONNECTION是連接也就是網(wǎng)卡的配置。一個(gè) DEVICE 可以有多個(gè)配置同一時(shí)刻只能激活一個(gè)配置。# 顯示設(shè)備列表狀態(tài)信息[rootserver ~18:00:50]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已連接 ens36-auto lo loopback 未托管 --# 斷開設(shè)備鏈接[rootserver ~18:03:02]# nmcli device disconnect ens36成功斷開設(shè)備ens36。[rootserver ~18:04:51]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已斷開 -- lo loopback 未托管 --# 連接設(shè)備[rootserver ~18:05:03]# nmcli device connect ens36成功用ens360f0d4ce8-0f37-3527-837e-b3b50f18bafd激活了設(shè)備。[rootserver ~18:06:11]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已連接 ens36-auto lo loopback 未托管 --# 顯示特定設(shè)備詳細(xì)信息[rootserver ~18:06:33]# nmcli device show ens33GENERAL.DEVICE: ens33 GENERAL.TYPE: ethernet GENERAL.HWADDR: 00:0C:29:BB:C6:BC GENERAL.MTU:1500GENERAL.STATE:100已連接 GENERAL.CONNECTION: ens33 GENERAL.CON-PATH:/org/freedesktop/NetworkManager/ActiveConnection/4 WIRED-PROPERTIES.CARRIER: 開 IP4.ADDRESS[1]:10.1.8.10/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst10.1.8.0/24, nh0.0.0.0, mt100IP4.ROUTE[2]: dst0.0.0.0/0, nh10.1.8.2, mt100IP4.DNS[1]:223.5.5.5 IP4.DNS[2]:223.6.6.6 IP6.ADDRESS[1]: fe80::a552:389:2e84:bb76/64 IP6.GATEWAY: -- IP6.ROUTE[1]: dstfe80::/64, nh::, mt100IP6.ROUTE[2]: dstff00::/8, nh::, mt256,table255[rootserver ~18:07:20]# nmcli device show ens36 | grep IP4IP4.ADDRESS[1]:10.1.8.130/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst0.0.0.0/0, nh10.1.8.2, mt101IP4.ROUTE[2]: dst10.1.8.0/24, nh0.0.0.0, mt101IP4.DNS[1]:10.1.8.2 IP4.DOMAIN[1]: localdomain3.動(dòng)態(tài)獲取# 查看connection清單[rootserver ~18:07:53]# nmcli connectionNAME UUID TYPE DEVICE ens33 bc1c5b36-8427-4174-88f8-1799c3c0418d ethernet ens33 ens36-auto 0f0d4ce8-0f37-3527-837e-b3b50f18bafd ethernet ens36# 刪除連接[rootserver ~19:25:01]# nmcli connection delete ens36-auto成功刪除連接ens36-auto(0f0d4ce8-0f37-3527-837e-b3b50f18bafd)。[rootserver ~19:27:25]# nmcli connectionNAME UUID TYPE DEVICE ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33# 添加網(wǎng)卡配置自動(dòng)獲取IP地址[rootserver ~19:27:29]# nmcli connection add type ethernet ifname ens36 con-name ens36-dynamic連接ens36-dynamic(a1272e17-0a82-4128-b76b-9d4efe5f04ed)已成功添加。[rootserver ~19:28:47]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33[rootserver ~19:29:00]# nmcli connection show ens36-dynamic... GENERAL.NAME: ens36-dynamic GENERAL.UUID: a1272e17-0a82-4128-b76b-9d4efe5f04ed GENERAL.DEVICES: ens36 GENERAL.STATE: 已激活 GENERAL.DEFAULT: 是 GENERAL.DEFAULT6: 否 GENERAL.SPEC-OBJECT: -- GENERAL.VPN: 否 GENERAL.DBUS-PATH:/org/freedesktop/NetworkManager/ActiveConnection/12 GENERAL.CON-PATH:/org/freedesktop/NetworkManager/Settings/6 GENERAL.ZONE: -- GENERAL.MASTER-PATH:-- IP4.ADDRESS[1]:10.1.8.131/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst0.0.0.0/0, nh10.1.8.2, mt105...# 修改配置指定獲取IP方式[rootserver ~19:30:52]# nmcli connection modify ens36-dynamic ipv4.method auto# 激活配置[rootserver ~19:31:31]# nmcli connection up ens36-dynamic連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/134.靜態(tài)配置# 添加一個(gè)靜態(tài)配置的連接[rootserver ~19:31:47]# nmcli connection add type ethernet ifname ens36 con-name ens36-static ipv4.method manual ipv4.addresses 10.1.8.100/24連接ens36-static(469670c8-7503-42e0-95f2-9a75a119056a)已成功添加。# 修改 ipv4 相關(guān)屬性[rootserver ~19:33:53]# nmcli connection modify ens36-static ipv4.gateway 10.1.8.2 ipv4.dns 10.1.8.2# 激活連接[rootserver ~19:34:19]# nmcli connection up ens36-static連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14# 查看狀態(tài)[rootserver ~19:34:31]# nmcli connectionNAME UUID TYPE DEVICE ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet --[rootserver ~19:34:41]# nmcli connection down ens36-static成功停用連接ens36-staticD-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14[rootserver ~19:35:03]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet --[rootserver ~19:35:10]# nmcli connection modify ens36-static ipv4.routes 192.168.50.0/24 10.1.8.25.其他操作# 停用連接[rootserver ~19:34:41]# nmcli connection down ens36-static成功停用連接ens36-staticD-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14[rootserver ~19:35:03]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet --# 根據(jù)需要配置路由[rootserver ~19:35:10]# nmcli connection modify ens36-static ipv4.routes 192.168.50.0/24 10.1.8.24.網(wǎng)絡(luò)配置文件提示盡量不要通過手動(dòng)修改配置來配置網(wǎng)絡(luò)# 動(dòng)態(tài)配置[rootserver ~19:35:38]# cat /etc/sysconfig/network-scripts/ifcfg-ens36-dynamicTYPEEthernetPROXY_METHODnoneBROWSER_ONLYnoBOOTPROTOdhcpDEFROUTEyesIPV4_FAILURE_FATALnoIPV6INITyesIPV6_AUTOCONFyesIPV6_DEFROUTEyesIPV6_FAILURE_FATALnoIPV6_ADDR_GEN_MODEstable-privacyNAMEens36-dynamicUUIDa1272e17-0a82-4128-b76b-9d4efe5f04edDEVICEens36ONBOOTyes# 靜態(tài)配置[rootserver ~19:40:16]# cat /etc/sysconfig/network-scripts/ifcfg-ens36-staticTYPEEthernetPROXY_METHODnoneBROWSER_ONLYnoBOOTPROTOnoneIPADDR10.1.8.100PREFIX24DEFROUTEyesIPV4_FAILURE_FATALnoIPV6INITyesIPV6_AUTOCONFyesIPV6_DEFROUTEyesIPV6_FAILURE_FATALnoIPV6_ADDR_GEN_MODEstable-privacyNAMEens36-staticUUID469670c8-7503-42e0-95f2-9a75a119056aDEVICEens36ONBOOTyesGATEWAY10.1.8.2DNS110.1.8.2# 某個(gè)網(wǎng)卡的路由配置[rootserver ~19:40:22]# cat /etc/sysconfig/network-scripts/route-ens36-staticADDRESS0192.168.50.0NETMASK0255.255.255.0GATEWAY010.1.8.2#手動(dòng)修改配置文件后續(xù)需要重新加載才能生效[rootserver ~19:40:54]# nmcli connection reload[rootserver ~19:41:59]# nmcli connection up ens36-static連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/16 CentOS 7.9 網(wǎng)絡(luò)配置與管理全流程，新手也能秒會(huì)
CentOS 7.9 網(wǎng)絡(luò)配置與管理全流程新手也能秒會(huì)Centos 7.9網(wǎng)絡(luò)管理詳解摘要一、查看網(wǎng)絡(luò)配置1.查看 link2.查看 IP3.查看 route4.查看dns二、測(cè)試網(wǎng)絡(luò)連通性1.ping 測(cè)試2.mtr 路由跟蹤3.ss工具三、配置網(wǎng)絡(luò)1.環(huán)境準(zhǔn)備1.對(duì)于 vmware workstations#服務(wù)中VMware DHCP 需要正在運(yùn)行2.右上角第二個(gè)圖標(biāo)可以直接回到主頁。3.點(diǎn)擊編輯虛擬機(jī)設(shè)置4.進(jìn)入此頁面點(diǎn)擊下方的添加彈出添加硬件頁面選擇網(wǎng)絡(luò)適配器點(diǎn)擊完成確定即可。5.添加后效果。2.nmtui 命令1.自動(dòng)配置2.手動(dòng)配置3.nmcli 命令1.網(wǎng)絡(luò)啟停2.設(shè)備控制3.動(dòng)態(tài)獲取4.靜態(tài)配置5.其他操作4.網(wǎng)絡(luò)配置文件Centos 7.9網(wǎng)絡(luò)管理詳解摘要本文詳細(xì)介紹了在 CentOS 7.9 系統(tǒng)中進(jìn)行網(wǎng)絡(luò)管理的完整流程與實(shí)用命令。主要內(nèi)容包括網(wǎng)絡(luò)配置查看使用ip、route、cat /etc/resolv.conf等命令查看網(wǎng)卡、IP地址、路由和DNS配置。網(wǎng)絡(luò)連通性測(cè)試通過ping、mtr測(cè)試網(wǎng)絡(luò)連通性與路由追蹤使用ss工具查看端口占用和網(wǎng)絡(luò)連接狀態(tài)。網(wǎng)絡(luò)配置方法圖形化工具使用nmtui進(jìn)行交互式配置自動(dòng)獲取與手動(dòng)設(shè)置。命令行工具使用nmcli進(jìn)行網(wǎng)絡(luò)啟停、設(shè)備控制、連接管理并演示了動(dòng)態(tài)獲取DHCP與靜態(tài)配置IP地址的具體步驟。配置文件介紹了網(wǎng)絡(luò)配置文件/etc/sysconfig/network-scripts/ifcfg-*與路由文件的存放位置及手動(dòng)修改后的生效方法。文章通過大量實(shí)際命令示例與截圖系統(tǒng)性地講解了從網(wǎng)絡(luò)狀態(tài)檢查、問題診斷到配置管理的全過程適用于系統(tǒng)管理員和運(yùn)維人員參考。一、查看網(wǎng)絡(luò)配置1.查看 link# 查看網(wǎng)絡(luò)設(shè)備清單關(guān)注mac地址.[lzserver ~17:14:38]$ip-brlinklo UNKNOWN 00:00:00:00:00:00LOOPBACK,UP,LOWER_UPens33 UP 00:0c:29:bb:c6:bcBROADCAST,MULTICAST,UP,LOWER_UP# 查看單個(gè)網(wǎng)絡(luò)設(shè)備信息.[lzserver ~17:14:45]$iplinkshow ens332: ens33:BROADCAST,MULTICAST,UP,LOWER_UPmtu1500qdisc pfifo_fast state UP mode DEFAULT group default qlen1000link/ether 00:0c:29:bb:c6:bc brd ff:ff:ff:ff:ff:ff2.查看 IP#關(guān)注IP地址和掩碼位數(shù)10.1.8.10/24.[lzserver ~17:14:55]$ip-bra lo UNKNOWN127.0.0.1/8 ::1/128 ens33 UP10.1.8.10/24 fe80::a552:389:2e84:bb76/64[lzserver ~17:16:30]$ipaddr show ens332: ens33:BROADCAST,MULTICAST,UP,LOWER_UPmtu1500qdisc pfifo_fast state UP group default qlen1000link/ether 00:0c:29:bb:c6:bc brd ff:ff:ff:ff:ff:ff inet10.1.8.10/24 brd10.1.8.255 scope global noprefixroute ens33 valid_lft forever preferred_lft forever inet6 fe80::a552:389:2e84:bb76/64 scopelinknoprefixroute valid_lft forever preferred_lft forever3.查看 route#default代表主機(jī)的網(wǎng)關(guān).[lzserver ~17:17:06]$iproute default via10.1.8.2 dev ens33 proto static metric10010.1.8.0/24 dev ens33 proto kernel scopelinksrc10.1.8.10 metric100# 還可以使用以下命令,前提有net-tools.#普通用戶權(quán)限不夠可以root用戶下執(zhí)行.[lzserver ~17:19:39]$ yuminstall-ynet-tools 已加載插件fastestmirror 您需要 root 權(quán)限執(zhí)行此命令。[lzserver ~17:20:27]$su- 密碼 上一次登錄五5月1517:10:41 CST2026從10.1.8.1pts/0 上[rootserver ~17:20:38]# yum install -y net-tools已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com...[lzserver ~17:25:30]$ route-nKernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface0.0.0.010.1.8.20.0.0.0 UG10000ens3310.1.8.00.0.0.0255.255.255.0 U10000ens33#或者[lzserver ~17:25:39]$netstat-nrKernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface0.0.0.010.1.8.20.0.0.0 UG000ens3310.1.8.00.0.0.0255.255.255.0 U000ens334.查看dns[lzserver ~17:25:51]$cat/etc/resolv.conf# Generated by NetworkManagersearch lz.cloud nameserver223.5.5.5 nameserver223.6.6.6二、測(cè)試網(wǎng)絡(luò)連通性1.ping 測(cè)試# ping 測(cè)試選項(xiàng)-c控制ping次數(shù)選項(xiàng)-w控制ping超時(shí)時(shí)間[lzserver ~17:29:47]$pingwww.baidu.com-c4-w5PING www.a.shifen.com(180.101.49.44)56(84)bytes of data.64bytes from180.101.49.44(180.101.49.44):icmp_seq1ttl128time74.6ms64bytes from180.101.49.44(180.101.49.44):icmp_seq2ttl128time120ms64bytes from180.101.49.44(180.101.49.44):icmp_seq3ttl128time92.7ms64bytes from180.101.49.44(180.101.49.44):icmp_seq4ttl128time103ms --- www.a.shifen.compingstatistics ---4packets transmitted,4received,0% packet loss,time3004ms rtt min/avg/max/mdev74.651/97.823/120.707/16.693 ms# 說明# 1- 能夠解析出ip 說明DNS配置正確# 2- 能ping 通說明我們的網(wǎng)關(guān)配置正確2.mtr 路由跟蹤# ping 主機(jī)不通此時(shí)跟蹤路由查看數(shù)據(jù)最遠(yuǎn)到達(dá)的位置[rootserver ~17:30:17]# yum install -y mtr已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com[lzserver ~17:32:38]$mtr-n1.1.1.13.ss工具#/etc/services 文件存儲(chǔ)常見端口和服務(wù)對(duì)應(yīng)關(guān)系。[lzserver ~17:38:03]$vim/etc/services... ftp-data20/tcp ftp-data20/udp# 21 is registered to ftp, but also used by fspftp21/tcpftp21/udp fsp fspdssh22/tcp# The Secure Shell (SSH) Protocolssh22/udp# The Secure Shell (SSH) Protocoltelnet23/tcp telnet23/udp... domain53/tcp# name-domain serverdomain53/udp... http80/tcp www www-http# WorldWideWeb HTTPhttp80/udp www www-http# HyperText Transfer Protocol... https443/tcp# http protocol over TLS/SSLhttps443/udp# http protocol over TLS/SSL...ss 命令用于查看系統(tǒng)中網(wǎng)絡(luò)狀態(tài)信息。以前使用 netstat 查看網(wǎng)絡(luò)狀態(tài)信息使用方法等效與 ss 命令。# 默認(rèn)顯示是 ESTAB 狀態(tài).[lzserver ~17:38:03]$ ss|grep:ssh tcp ESTAB03610.1.8.10:ssh10.1.8.1:dyna-lm tcp ESTAB0010.1.8.10:ssh10.1.8.1:51122# 只看 LISTEN包含IPv4和IPv6.[lzserver ~17:40:03]$ ss-l|grep:ssh tcp LISTEN0128*:ssh *:* tcp LISTEN0128[::]:ssh[::]:*# 查看 ipv4 所有LISTEN和ESTAB網(wǎng)絡(luò)狀態(tài).[lzserver ~17:41:12]$ ss -a4|grep:ssh tcp LISTEN0128*:ssh *:* tcp ESTAB03610.1.8.10:ssh10.1.8.1:dyna-lm tcp ESTAB0010.1.8.10:ssh10.1.8.1:51122# -n 將服務(wù)的名稱顯示為數(shù)字.[lzserver ~17:41:46]$ ss -an4|grep:22 tcp LISTEN0128*:22 *:* tcp ESTAB03610.1.8.10:2210.1.8.1:3395 tcp ESTAB0010.1.8.10:2210.1.8.1:51122# -p 顯示相應(yīng)的進(jìn)程.[lzserver ~17:42:19]$ ss -lnp4|grep:22 tcp LISTEN0128*:22 *:*模擬環(huán)境[rootserver ~17:39:03]# yum install -y nginx已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com 正在解決依賴關(guān)系...[rootserver ~17:44:21]# systemctl start nginx.service[rootserver ~17:45:42]# echo Hello World zheng /usr/share/nginx/html/index.html[rootserver ~17:46:24]# curl http://10.1.8.10Hello World zheng[rootserver ~17:46:39]# yum install -y httpd已加載插件fastestmirror Loading mirror speeds from cached hostfile * base: mirrors.aliyun.com * extras: mirrors.aliyun.com * updates: mirrors.aliyun.com 正在解決依賴關(guān)系 --正在檢查事務(wù) ---軟件包 httpd.x86_64.0.2.4.6-99.el7.centos.1 將被 安裝...[rootserver ~17:46:54]# systemctl start httpdJobforhttpd.service failed because the control process exited with error code. Seesystemctl status httpd.serviceandjournalctl -xefordetails.[rootserver ~17:47:31]# systemctl status httpd.service|grep use5月1517:47:31 server.lz.cloud httpd[11604]:(98)Address alreadyinuse: AH00072: make_sock: could notbindto address[::]:805月1517:47:31 server.lz.cloud httpd[11604]:(98)Address alreadyinuse: AH00072: make_sock: could notbindto address0.0.0.0:80#查找端口被哪個(gè)程序使用.[rootserver ~17:47:50]# ss -lnp4|grep :80tcp LISTEN0128*:80 *:* users:((nginx,pid11551,fd6),(nginx,pid11550,fd6),(nginx,pid11549,fd6))#解決方法.[rootserver ~17:48:04]# systemctl stop nginx[rootserver ~17:49:05]# systemctl start httpd[rootserver ~17:49:14]# systemctl status httpd● httpd.service - The Apache HTTP Server Loaded: loaded(/usr/lib/systemd/system/httpd.service;disabled;vendor preset: disabled)Active: active(running)since 五2026-05-1517:49:14 CST;11s ago Docs: man:httpd(8)man:apachectl(8)Main PID:11627(httpd)Status:Total requests: 0; Current requests/sec: 0; Current traffic: 0 B/secCGroup: /system.slice/httpd.service ├─11627 /usr/sbin/httpd-DFOREGROUND├─11628 /usr/sbin/httpd-DFOREGROUND├─11629 /usr/sbin/httpd-DFOREGROUND├─11630 /usr/sbin/httpd-DFOREGROUND├─11631 /usr/sbin/httpd-DFOREGROUND└─11632 /usr/sbin/httpd-DFOREGROUND5月1517:49:14 server.lz.cloud systemd[1]: Starting The Apache HTTP Server...5月1517:49:14 server.lz.cloud systemd[1]: Started The Apache HTTP Server.三、配置網(wǎng)絡(luò)網(wǎng)絡(luò)配置是由 NetworkManager 服務(wù)管理的確保該服務(wù)開機(jī)自啟。1.環(huán)境準(zhǔn)備虛擬機(jī)新增加一個(gè)NAT網(wǎng)卡。自動(dòng)獲取的前提條件是直連的網(wǎng)絡(luò)中有dhcp服務(wù)器。1.對(duì)于 vmware workstations#服務(wù)中VMware DHCP 需要正在運(yùn)行2.右上角第二個(gè)圖標(biāo)可以直接回到主頁。3.點(diǎn)擊編輯虛擬機(jī)設(shè)置4.進(jìn)入此頁面點(diǎn)擊下方的添加彈出添加硬件頁面選擇網(wǎng)絡(luò)適配器點(diǎn)擊完成確定即可。5.添加后效果。2.nmtui 命令1.自動(dòng)配置# 服務(wù)器配置[rootserver ~17:49:25]# nmtui使用上下鍵、tab進(jìn)行移動(dòng)回車選中條目。2.手動(dòng)配置思考什么情況下用自動(dòng)配置和手動(dòng)配置? 自動(dòng)配置無靜態(tài)IP地址需求的其他情況。例如辦公環(huán)境員工的電腦公共場(chǎng)所無線。? 手動(dòng)配置需要一個(gè)靜態(tài)IP地址例如對(duì)外提供服務(wù)的數(shù)據(jù)庫服務(wù)器需要一個(gè)靜態(tài)的IP地址。3.nmcli 命令1.網(wǎng)絡(luò)啟停# 停用網(wǎng)絡(luò)并不會(huì)停止 NetworkManager 服務(wù)。[rootserver ~17:59:28]# nmcli networking off# 網(wǎng)卡狀態(tài)變化activated - deactivating - disconnected - unmanaged - unavailable# 啟用網(wǎng)絡(luò)[rootserver ~18:00:44]# nmcli networking on# 網(wǎng)卡狀態(tài)變化unavailable - disconnected - auto-activating2.設(shè)備控制DEVICE是設(shè)備也就是網(wǎng)卡。CONNECTION是連接也就是網(wǎng)卡的配置。一個(gè) DEVICE 可以有多個(gè)配置同一時(shí)刻只能激活一個(gè)配置。# 顯示設(shè)備列表狀態(tài)信息[rootserver ~18:00:50]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已連接 ens36-auto lo loopback 未托管 --# 斷開設(shè)備鏈接[rootserver ~18:03:02]# nmcli device disconnect ens36成功斷開設(shè)備ens36。[rootserver ~18:04:51]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已斷開 -- lo loopback 未托管 --# 連接設(shè)備[rootserver ~18:05:03]# nmcli device connect ens36成功用ens360f0d4ce8-0f37-3527-837e-b3b50f18bafd激活了設(shè)備。[rootserver ~18:06:11]# nmcli deviceDEVICE TYPE STATE CONNECTION ens33 ethernet 已連接 ens33 ens36 ethernet 已連接 ens36-auto lo loopback 未托管 --# 顯示特定設(shè)備詳細(xì)信息[rootserver ~18:06:33]# nmcli device show ens33GENERAL.DEVICE: ens33 GENERAL.TYPE: ethernet GENERAL.HWADDR: 00:0C:29:BB:C6:BC GENERAL.MTU:1500GENERAL.STATE:100已連接 GENERAL.CONNECTION: ens33 GENERAL.CON-PATH:/org/freedesktop/NetworkManager/ActiveConnection/4 WIRED-PROPERTIES.CARRIER: 開 IP4.ADDRESS[1]:10.1.8.10/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst10.1.8.0/24, nh0.0.0.0, mt100IP4.ROUTE[2]: dst0.0.0.0/0, nh10.1.8.2, mt100IP4.DNS[1]:223.5.5.5 IP4.DNS[2]:223.6.6.6 IP6.ADDRESS[1]: fe80::a552:389:2e84:bb76/64 IP6.GATEWAY: -- IP6.ROUTE[1]: dstfe80::/64, nh::, mt100IP6.ROUTE[2]: dstff00::/8, nh::, mt256,table255[rootserver ~18:07:20]# nmcli device show ens36 | grep IP4IP4.ADDRESS[1]:10.1.8.130/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst0.0.0.0/0, nh10.1.8.2, mt101IP4.ROUTE[2]: dst10.1.8.0/24, nh0.0.0.0, mt101IP4.DNS[1]:10.1.8.2 IP4.DOMAIN[1]: localdomain3.動(dòng)態(tài)獲取# 查看connection清單[rootserver ~18:07:53]# nmcli connectionNAME UUID TYPE DEVICE ens33 bc1c5b36-8427-4174-88f8-1799c3c0418d ethernet ens33 ens36-auto 0f0d4ce8-0f37-3527-837e-b3b50f18bafd ethernet ens36# 刪除連接[rootserver ~19:25:01]# nmcli connection delete ens36-auto成功刪除連接ens36-auto(0f0d4ce8-0f37-3527-837e-b3b50f18bafd)。[rootserver ~19:27:25]# nmcli connectionNAME UUID TYPE DEVICE ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33# 添加網(wǎng)卡配置自動(dòng)獲取IP地址[rootserver ~19:27:29]# nmcli connection add type ethernet ifname ens36 con-name ens36-dynamic連接ens36-dynamic(a1272e17-0a82-4128-b76b-9d4efe5f04ed)已成功添加。[rootserver ~19:28:47]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33[rootserver ~19:29:00]# nmcli connection show ens36-dynamic... GENERAL.NAME: ens36-dynamic GENERAL.UUID: a1272e17-0a82-4128-b76b-9d4efe5f04ed GENERAL.DEVICES: ens36 GENERAL.STATE: 已激活 GENERAL.DEFAULT: 是 GENERAL.DEFAULT6: 否 GENERAL.SPEC-OBJECT: -- GENERAL.VPN: 否 GENERAL.DBUS-PATH:/org/freedesktop/NetworkManager/ActiveConnection/12 GENERAL.CON-PATH:/org/freedesktop/NetworkManager/Settings/6 GENERAL.ZONE: -- GENERAL.MASTER-PATH:-- IP4.ADDRESS[1]:10.1.8.131/24 IP4.GATEWAY:10.1.8.2 IP4.ROUTE[1]: dst0.0.0.0/0, nh10.1.8.2, mt105...# 修改配置指定獲取IP方式[rootserver ~19:30:52]# nmcli connection modify ens36-dynamic ipv4.method auto# 激活配置[rootserver ~19:31:31]# nmcli connection up ens36-dynamic連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/134.靜態(tài)配置# 添加一個(gè)靜態(tài)配置的連接[rootserver ~19:31:47]# nmcli connection add type ethernet ifname ens36 con-name ens36-static ipv4.method manual ipv4.addresses 10.1.8.100/24連接ens36-static(469670c8-7503-42e0-95f2-9a75a119056a)已成功添加。# 修改 ipv4 相關(guān)屬性[rootserver ~19:33:53]# nmcli connection modify ens36-static ipv4.gateway 10.1.8.2 ipv4.dns 10.1.8.2# 激活連接[rootserver ~19:34:19]# nmcli connection up ens36-static連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14# 查看狀態(tài)[rootserver ~19:34:31]# nmcli connectionNAME UUID TYPE DEVICE ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet --[rootserver ~19:34:41]# nmcli connection down ens36-static成功停用連接ens36-staticD-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14[rootserver ~19:35:03]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet --[rootserver ~19:35:10]# nmcli connection modify ens36-static ipv4.routes 192.168.50.0/24 10.1.8.25.其他操作# 停用連接[rootserver ~19:34:41]# nmcli connection down ens36-static成功停用連接ens36-staticD-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/14[rootserver ~19:35:03]# nmcli connection showNAME UUID TYPE DEVICE ens36-dynamic a1272e17-0a82-4128-b76b-9d4efe5f04ed ethernet ens36 ens33 1eacd4fe-95bc-47f9-be7f-6bae5f7080a1 ethernet ens33 ens36-static 469670c8-7503-42e0-95f2-9a75a119056a ethernet --# 根據(jù)需要配置路由[rootserver ~19:35:10]# nmcli connection modify ens36-static ipv4.routes 192.168.50.0/24 10.1.8.24.網(wǎng)絡(luò)配置文件提示盡量不要通過手動(dòng)修改配置來配置網(wǎng)絡(luò)# 動(dòng)態(tài)配置[rootserver ~19:35:38]# cat /etc/sysconfig/network-scripts/ifcfg-ens36-dynamicTYPEEthernetPROXY_METHODnoneBROWSER_ONLYnoBOOTPROTOdhcpDEFROUTEyesIPV4_FAILURE_FATALnoIPV6INITyesIPV6_AUTOCONFyesIPV6_DEFROUTEyesIPV6_FAILURE_FATALnoIPV6_ADDR_GEN_MODEstable-privacyNAMEens36-dynamicUUIDa1272e17-0a82-4128-b76b-9d4efe5f04edDEVICEens36ONBOOTyes# 靜態(tài)配置[rootserver ~19:40:16]# cat /etc/sysconfig/network-scripts/ifcfg-ens36-staticTYPEEthernetPROXY_METHODnoneBROWSER_ONLYnoBOOTPROTOnoneIPADDR10.1.8.100PREFIX24DEFROUTEyesIPV4_FAILURE_FATALnoIPV6INITyesIPV6_AUTOCONFyesIPV6_DEFROUTEyesIPV6_FAILURE_FATALnoIPV6_ADDR_GEN_MODEstable-privacyNAMEens36-staticUUID469670c8-7503-42e0-95f2-9a75a119056aDEVICEens36ONBOOTyesGATEWAY10.1.8.2DNS110.1.8.2# 某個(gè)網(wǎng)卡的路由配置[rootserver ~19:40:22]# cat /etc/sysconfig/network-scripts/route-ens36-staticADDRESS0192.168.50.0NETMASK0255.255.255.0GATEWAY010.1.8.2#手動(dòng)修改配置文件后續(xù)需要重新加載才能生效[rootserver ~19:40:54]# nmcli connection reload[rootserver ~19:41:59]# nmcli connection up ens36-static連接已成功激活D-Bus 活動(dòng)路徑/org/freedesktop/NetworkManager/ActiveConnection/16