必须使用NetworkManager管理网络

网络管理工具

nmcli

nmcli device show
nmcli device status 网卡是否启用nmcli connection提供多套网络配置
nmcli connection show 查看配置文件与网卡的关联，及针对哪个网卡生效nmcli connection show ens33 查看指定网卡的配置
nmcli connection delete ens33删除配置，连配置文件一起删nmcli connection modify Wired\ connection\ 1 connection.id con-eth1
#添加一套配置（或者直接拷贝配置文件）
nmcli connection add con-name con-eth1-office ipv4.method manual ipv4.address 172.16.2.34/16 type ethernet ifname eth1
#生效
nmcli connection down con-eth1
nmcli con up con-eth1-officenmcli connection reload 重载配置

增加ip

nmcli con add con-name static ifname eth0 autoconnect no type Etherenet ip4 172.15.6.10/24 gw 172.15.6.0

修改配置

nmcli con mod"static" connection.autoconnect no修改dns
nmcli con mod"static" ipv4.dns 172.15.3.9增加dns
nmcli con mod"static" +ipv4.dns 172.15.3.9删除dns
nmcli con mod"static" -ipv4.dns 8.8.8.8增加ip和网关
nmcli con mod"static" ipv4.address "172.15.4.10/16"增加ip
nmcli con mod"static" +ipv4.address 10.10.10.10/16

命令与配置对应表

header 1	header 2
ipv4.method manual	BOOTPROTO=none
ipv4.method auto	BOOTPROTO=dhcp
ipv4.addresses “192.0.2.1/24 192.0.2.254”	IPADDR0=192.0.2.1 PREFIX0=24 GATEWAY0=192.0.2.254
ipv4.dns 8.8.8.8	DNS0=8.8.8.8
ipv4.dns-search example.com	DOMAIN=example.com
ipv4.ignore-auto-dns true	PEERDNS=no
connection.autoconnect yes	ONBOOT=yes
connection.id eth0	NAME=eth0
connection.interface-name eth0	DEVICE=eth0
802-3-ethernet.mac-address …	HWADDR= …

• 修改连接配置后，需要重新加载配置
  nmcli con reload
• nmcli con down “system eth0” 可被自动激活
• nmcli con up “system eth0”
• nmcli dev dis eth0 禁用网卡，访止被自动激活（逻辑上的断开）

图形工具

nm-connection-editor

字符工具

• nmtui
• nmtui-connect
• nmtui-edit
• nmtui-hostname

添加bonding 接口：

nmcli con add type bond con-name mybond0 ifname
mybond0 mode active-backup

mode:
- 802.3ad
- active-backup
- balance-alb
- balance-rr
- balance-tlb
- balance-xor
- broadcast

添加从属接口：

nmcli con add type bond-slave ifname ens7 master mybond0
nmcli con add type bond-slave ifname ens3 master mybond0
注：如无为从属接口提供连接名，则该名称是接口名称加类型构成
- 要启动绑定，则必须首先启动从属接口:
nmcli con up bond-slave-ens7
nmcli con up bond-slave-ens3
- 现在可使用以下方法启动绑定：
nmcli con up mybond0

bonding实现实例

#注意所有slave网卡要用桥接模式
nmcli con add con-name bond0 ipv4.method static ipv4.addresses 176.30.30.30/16 type bond mode active-backup nmcli con shownmcli connection modify bond0 ipv4.gateway 176.30.7.1
cat ifcfg-bond0 
#添加slave
nmcli connection add type bond-slave master bond0 ifname ens33
Connection 'bond-slave-ens33' (fbf9a891-e8d5-4ef2-a8d7-fbeb6e2fe4bb) successfully added.
[772][root@liyong: network-scripts]# nmcli connection add type bond-slave master bond0 ifname ens37
Connection 'bond-slave-ens37' (443d40ad-bb42-4609-b4cd-7904abfbd2c6) successfully added.#删除slave
nmcli con delete bond-slave-eth0 #先启动slave
nmcli connection up bond-slave-ens33
nmcli connection up bond-slave-ens37#再启动slave
nmcli connection up bond0cat /proc/net/bonding/nm-bond # 删除bond
nmcli connection down bond0
nmcli connection del bond-slave-ens33
nmcli connection del bond-slave-ens37

网络组 Network Teaming

是将多个网卡聚合在一起方法，从而实现冗错和提
高吞吐量
- 网络组不同于旧版中bonding 技术，提供更好的性能和扩展性
- 网络组由内核驱动和teamd 守护进程实现
- 多种方式runner
broadcast

roundrobinactivebackuploadbalancelacp (implements the 802.3ad Link Aggregation Control
Protocol)

创建网络组

nmcli con add type team-slave con-name CNAME
ifname INAME master TEAM

CNAME 连接名

INAME 网络接口名

TEAM 网络组接口名

连接名若不指定，默认为team-slave- IFACE
- nmcli dev dis INAME
- nmcli con up CNAME

INAME 设备名 CNAME 网络组接口名或port 接口

网络组配置文件

/etc/sysconfig/network-scripts/ifcfg-team0
DEVICE=team0
DEVICETYPE=Team
TEAM_CONFIG="{\"runner\": {\"name\": \"broadcast\"}}"
BOOTPROTO=none
IPADDR0=172.25.5.100
PREFIX0=24
NAME=team0
ONBOOT=yes/etc/sysconfig/network-scripts/ifcfg-team0-eth1
DEVICE=eth1
DEVICETYPE=TeamPort
TEAM_MASTER=team0
NAME=team0-eth1
ONBOOT=yes

网络组实例

##实例1
#创建team
nmcli con add type team con-name team0 ifname
team0 config ‘{"runner": {"name": "loadbalance"}}'
runner包括: broadcast,roundrobin,activebackup, loadbalance,lacp nmcli con mod team0 ipv4.addresses
192.168.1.100/24
nmcli con mod team0 ipv4.method manual
#加入网卡
nmcli con add con-name team0-eth1 type team-
slave ifname eth1 master team0
nmcli con add con-name team0-eth2 type team-
slave ifname eth2 master team0
#启动
nmcli con up team0
nmcli con up team0-eth1
nmcli con up team0-eth2
#查看
teamdctl team0 state;
nmcli dev dis eth1##实例2
ip link
#创建team0
nmcli con add type team con-name team0 ifname
team0 config '{"runner": {"name": "activebackup"}}'
nmcli con mod team0 ipv4.addresses
'192.168.0.100/24'
nmcli con mod team0 ipv4.method manual#加入网卡
nmcli con add con-name team0-port1 type team-
slave ifname eth1 master team0
nmcli con add con-name team0-port2 type team-
slave ifname eth2 master team0#查看
teamdctl team0 state#测试
ping -I team0 192.168.0.100
nmcli dev dis eno1
teamdctl team0 state
nmcli con up team0-port1
nmcli dev dis eno2
teamdctl team0 state
nmcli con up team0-port2
teamdctl team0 state

删除网络组

nmcli connection down team0
teamdctl team0 state
nmcli connection show
nmcli connectioni delete team0-eth0
nmcli connectioni delete team0-eth1
nmcli connection show