net
This commit is contained in:
root
parent
eda42e9c71
commit
574c8122bf
13
dhcp
13
dhcp
|
|
@ -5,9 +5,9 @@ default-lease-time 600;
|
|||
max-lease-time 7200;
|
||||
authoritative;
|
||||
|
||||
subnet 192.168.3.0 netmask 255.255.255.248 {
|
||||
range 192.168.3.1 192.168.3.6;
|
||||
option domain-name-servers 8.8.8.8, 8.8.4.4;
|
||||
subnet 192.168.4.0 netmask 255.255.255.248 {
|
||||
range 192.168.4.2 192.168.4.6;
|
||||
option domain-name-servers 192.168.3.2, 8.8.4.4;
|
||||
option subnet-mask 255.255.255.248;
|
||||
option routers 172.16.4.1;
|
||||
}
|
||||
|
|
@ -23,8 +23,9 @@ EOF
|
|||
chmod 600 /etc/dhcp/dhcpd.conf
|
||||
|
||||
cat > /etc/sysconfig/dhcpd << EOF
|
||||
DHCPDARGS="enp0s8"
|
||||
DHCPDARGS="enp0s9"
|
||||
EOF
|
||||
|
||||
systemctl enable dhcp
|
||||
systemctl start dhcp
|
||||
echo "_________________Перезагрузка и старт dncpd________________________"
|
||||
systemctl restart dhcpd
|
||||
systemctl start dhcpd
|
||||
|
|
|
|||
90
dns
90
dns
|
|
@ -1,52 +1,58 @@
|
|||
#!/bit/bash
|
||||
#cat > /etc/named.conf << EOF
|
||||
#options {
|
||||
# listen-on port 53 { 127.0.0.1; 192.168.2.2; };
|
||||
# listen-on-v6 port 53 { none; };
|
||||
# directory "/var/named";
|
||||
# dump-file "/var/named/data/cache_dump.db";
|
||||
# statistics-file "/var/named/data/named_stats.txt";
|
||||
# memstatistics-file "/var/named/data/named_mem_stats.txt";
|
||||
# secroots-file "/var/named/data.named/data/named.secroots";
|
||||
# recursing-file "/var/named/data/named.recursing";
|
||||
# allow-query { any; };
|
||||
# forward first;
|
||||
# forwarders { 8.8.8.8; };
|
||||
#};
|
||||
#
|
||||
#zone "." IN {
|
||||
# type hint;
|
||||
# file "var/named/named.ca";
|
||||
#};
|
||||
#
|
||||
#include "/etc/named.rfcq912.zones";
|
||||
#include "/etc/named.root.key";
|
||||
#
|
||||
#zone "team.irpo" {
|
||||
#type master;
|
||||
#file "master/team.irpo";
|
||||
#};
|
||||
#
|
||||
#zone "3.168.192.in-addr.arpa" {
|
||||
#type master;
|
||||
#file "master/3.168.192.in-addr.arpa";
|
||||
#};
|
||||
#
|
||||
#zone "4.168.192.in-addr.arpa" {
|
||||
#type master;
|
||||
#file "master/4.168.192.in-addr.arpa";
|
||||
#};
|
||||
#
|
||||
cat > /etc/named.conf << EOF
|
||||
options {
|
||||
listen-on port 53 { 127.0.0.1; 192.168.3.2; };
|
||||
listen-on-v6 port 53 { none; };
|
||||
directory "/var/named";
|
||||
dump-file "/var/named/data/cache_dump.db";
|
||||
statistics-file "/var/named/data/named_stats.txt";
|
||||
memstatistics-file "/var/named/data/named_mem_stats.txt";
|
||||
secroots-file "/var/named/data.named/data/named.secroots";
|
||||
recursing-file "/var/named/data/named.recursing";
|
||||
allow-query { any; };
|
||||
forward first;
|
||||
forwarders { 8.8.8.8; };
|
||||
};
|
||||
|
||||
logging {
|
||||
channel default_debug {
|
||||
file "data/named.run";
|
||||
severity dynamic;
|
||||
};
|
||||
};
|
||||
zone "." IN {
|
||||
type hint;
|
||||
file "named.ca";
|
||||
};
|
||||
|
||||
include "/etc/named.rfc1912.zones";
|
||||
include "/etc/named.root.key";
|
||||
|
||||
zone "au-team.irpo" {
|
||||
type master;
|
||||
file "master/au-team.irpo";
|
||||
};
|
||||
|
||||
zone "3.168.192.in-addr.arpa" {
|
||||
type master;
|
||||
file "master/3.168.192.in-addr.arpa";
|
||||
};
|
||||
|
||||
zone "4.168.192.in-addr.arpa" {
|
||||
type master;
|
||||
file "master/4.168.192.in-addr.arpa";
|
||||
};
|
||||
|
||||
#zone "4.16.172.in-addr.arpa" {
|
||||
#type master;
|
||||
#file "4.16.172.in-addr.arpa";
|
||||
#};
|
||||
#EOF
|
||||
EOF
|
||||
|
||||
|
||||
mkdir /var/named/master
|
||||
|
||||
cat > /var/named/master/team.irpo << EOF
|
||||
cat > /var/named/master/au-team.irpo << EOF
|
||||
\$TTL 604800 ;
|
||||
au-team.irpo. IN SOA ns01.au-team.irpo. root.au-team.irpo. (
|
||||
1 ; Serial
|
||||
|
|
@ -100,7 +106,7 @@ cat > /var/named/master/4.168.192.in-addr.arpa << EOF
|
|||
EOF
|
||||
|
||||
# Zone for HQ-RTR
|
||||
cat > /var/named/master/4.16.172.in-addr.arpo << EOF
|
||||
cat > /var/named/master/4.16.172.in-addr.arpa << EOF
|
||||
\$TTL 604800 ;
|
||||
@ IN SOA ns01.au-team.irpo. root.au-team.irpo.(
|
||||
20060204 ; Serial
|
||||
|
|
@ -119,5 +125,5 @@ if [[ -n $res ]]; then
|
|||
chmod 0640 /var/named/master/*
|
||||
fi
|
||||
echo ""
|
||||
echo "_______________________Restart______________________"
|
||||
echo "_______________________Перезагрузка named______________________"
|
||||
systemctl restart named
|
||||
|
|
|
|||
21
int
21
int
|
|
@ -11,7 +11,7 @@ while a==1
|
|||
echo "3. IP-адрес"
|
||||
echo "4. Forward и masquerade"
|
||||
echo "5. Перезагрузить машину"
|
||||
echo "6. Аккаунты"
|
||||
echo "6. Time zone"
|
||||
echo "0. Выход"
|
||||
echo ""
|
||||
read num
|
||||
|
|
@ -30,7 +30,7 @@ while a==1
|
|||
echo "_____________________Enp0s3_______________________"
|
||||
read -p "Введите ip-адрес или пропустите для DHCP: " ip_s3
|
||||
if [[ -n $ip_s3 ]]; then
|
||||
read -p "Введите шлюз: " gt_s3
|
||||
read -p "Введите шлюз или пропустите: " gt_s3
|
||||
cat > /etc/NetworkManager/system-connections/enp0s3.nmconnection << EOF
|
||||
[connection]
|
||||
id=enp0s3
|
||||
|
|
@ -73,7 +73,7 @@ EOF
|
|||
fi
|
||||
echo ""
|
||||
echo "___________________________Enp0s10___________________________"
|
||||
read -p "Enter ip or skip: " ip_s10
|
||||
read -p "Введите ip-адрес или пропустите: " ip_s10
|
||||
if [[ -n $ip_s10 ]]; then
|
||||
nmcli connection modify enp0s10 ipv4.method manual ipv4.addresses $ip_s10 ipv6.method disabled
|
||||
systemctl restart NetworkManager
|
||||
|
|
@ -86,11 +86,12 @@ EOF
|
|||
sysctl net.ipv4.ip_forward=1 >> /etc/sysctl.conf
|
||||
systemctl enable --now iptables
|
||||
iptables -F
|
||||
read -p "Введите количество ip-адресов для Masquerade: " a
|
||||
read -p "Введите количество ip-адресов для которых необходимо задать Masquerade: " a
|
||||
if (( $a == 2 )); then
|
||||
if [[ -n $ip_s8 || $ip_s9 ]]; then
|
||||
iptables -t nat -A POSTROUTING -s $ip_s8 -o enp0s3 -j MASQUERADE
|
||||
iptables -t nat -A POSTROUTING -s $ip_s9 -o enp0s3 -j MASQUERADE
|
||||
echo "Готово"
|
||||
else
|
||||
read -p "Введите ip-адрес для enp0s8(192.168.0.0/30): " ip_s8
|
||||
read -p "Введите ip-адрес для enp0s9(192.168.0.0/30): " ip_s9
|
||||
|
|
@ -100,6 +101,7 @@ EOF
|
|||
elif (( $a == 1)); then
|
||||
if [[ -n $ip_s8 ]]; then
|
||||
iptables -t nat -A POSTROUTING -s $ip_s8 -o enp0s3 -j MASQUERADE
|
||||
echo "Готово"
|
||||
else
|
||||
read -p "Введите ip для enp0s8: " ip_s8
|
||||
iptables -t nat -A POSTROUTING -s $ip_s8 -o enp0s3 -j MASQUERADE
|
||||
|
|
@ -126,14 +128,9 @@ EOF
|
|||
echo""
|
||||
|
||||
elif (( $num == 6)); then
|
||||
echo "________________________Аккаунт_________________________"
|
||||
read -p "Yes or no?: " acc
|
||||
if [[ -n $acc ]]; then
|
||||
read -p "Введите имя аккаунта: " acc_n
|
||||
cat >> /etc/sudoers << EOF
|
||||
$acc_n ALL=(ALL)NOPASSWD:ALL
|
||||
EOF
|
||||
echo "For watch time zone inter: timedatectl list-timezones"
|
||||
echo "Inter timedatectl set-timezone 'timezone' "
|
||||
|
||||
chmod 600 /etc/sudoers
|
||||
fi
|
||||
fi
|
||||
done
|
||||
|
|
|
|||
4
ospf_brr
4
ospf_brr
|
|
@ -1,8 +1,8 @@
|
|||
#!bin/bash
|
||||
|
||||
read -p "Введите id роутера(1.1.1.1): " r_id
|
||||
read -p "Введите подсеть для enp0s3 (172.16.4.0/28): " ip_s3
|
||||
read -p "Введите подсеть для enp0s8(192.168.3.0/26): " ip_s8
|
||||
read -p "Введите подсеть для enp0s3 (172.16.5.0/28): " ip_s3
|
||||
read -p "Введите подсеть для enp0s8(192.168.2.0/26): " ip_s8
|
||||
read -p "Введите подсеть для туннеля(192.168.9.0/30): " ip_tun
|
||||
read -p "Введите имя(BR-RTR): " name
|
||||
cat > /etc/frr/daemons << EOF
|
||||
|
|
|
|||
3
ospf_hqr
3
ospf_hqr
|
|
@ -1,4 +1,5 @@
|
|||
#!/bin/bash
|
||||
#!bin/bash
|
||||
|
||||
read -p "Введите имя(HQ-RTR): " name
|
||||
read -p "Введите id роутера(2.2.2.2): " r_id
|
||||
read -p "Введите подсеть для enp0s3(172.16.4.0/28): " ip_s3
|
||||
|
|
|
|||
4
tunel
4
tunel
|
|
@ -2,7 +2,7 @@
|
|||
read -p "Введите локальный ip-адрес для тунеля(172.16.0.2): " l_ip
|
||||
read -p "Введите удаленный ip-адрес для туннеля(172.16.0.2): " r_ip
|
||||
read -p "Введите ip-адрес туннеля(192.168.9.1/30)" t_ip
|
||||
read -p "Введите имя туннеля: " name
|
||||
read -p "Введите имя туннеля(gre1): " name
|
||||
|
||||
ip link delete gre1 2>/dev/null
|
||||
|
||||
|
|
@ -10,5 +10,5 @@ ip tunnel add $name mode gre local $l_ip remote $r_ip ttl 64 dev enp0s3
|
|||
ip addr add $t_ip dev $name
|
||||
ip link set $name up
|
||||
|
||||
echo "Введите nmcli connection modify gre1 ip-tunnel.ttl 64"
|
||||
echo "Введите nmcli connection modify "$name" ip-tunnel.ttl 64"
|
||||
systemctl restart NetworkManager
|
||||
|
|
|
|||
Loading…
Reference in a new issue