Yadda ake Sanyawa da Sanya Multihomed ISC DHCP Server akan Linux Debian

Dynamic Host Control Protocol (DHCP) yana ba da hanyar gaggawa don masu gudanar da cibiyar sadarwa don samar da layin hanyar sadarwa ga runduna a kan hanyar sadarwa mai canzawa koyaushe, ko mai ƙarfi. Ɗaya daga cikin kayan aikin uwar garken gama gari don bayar da ayyukan DHCP shine ISC DHCP Server. Manufar wannan sabis ɗin ita ce samar da runduna da mahimman bayanan hanyar sadarwa don samun damar sadarwa akan hanyoyin sadarwar da aka haɗa rundunar a cikinsu. Bayanan da yawanci wannan sabis ɗin ke aiki zai iya haɗawa da: Bayanin uwar garken DNS, adireshin cibiyar sadarwa (IP), abin rufe fuska, bayanan ƙofar tsoho, sunan mai masauki, da ƙari mai yawa.

Wannan koyawa za ta rufe nau'in ISC-DHCP-Server 4.2.4 akan uwar garken Debian 7.7 wanda zai sarrafa cibiyoyin sadarwar yanki da yawa (VLAN) amma ana iya amfani da su cikin sauƙi zuwa saitin hanyar sadarwa guda ɗaya kuma.

Cibiyar sadarwar gwajin da aka saita wannan uwar garken a bisa ga al'ada ta dogara da na'ura mai ba da hanya tsakanin hanyoyin sadarwa ta Cisco don sarrafa hayar adreshin DHCP. Cibiyar sadarwa a halin yanzu tana da VLANs 12 da ke buƙatar sarrafawa ta hanyar uwar garken tsakiya guda ɗaya. Ta hanyar matsar da wannan alhakin zuwa uwar garken da aka keɓe, na'ura mai ba da hanya tsakanin hanyoyin sadarwa na iya dawo da albarkatu don ƙarin ayyuka masu mahimmanci kamar su zirga-zirga, jerin hanyoyin sarrafawa, binciken zirga-zirga, da fassarar adireshin cibiyar sadarwa.

Sauran fa'ida don matsar DHCP zuwa sabar da aka keɓe, a cikin jagora na gaba, ya haɗa da kafa Sabis na Sunan Domain Name (DDNS) domin a ƙara sabbin sunayen runduna zuwa tsarin DNS lokacin da mai watsa shiri ya nemi adireshin DHCP daga uwar garken.

Mataki 1: Shigarwa da Sanya ISC DHCP Server

1. Don fara aiwatar da ƙirƙirar wannan uwar garken gida da yawa, ana buƙatar shigar da software ta ISC ta wuraren ajiyar Debian ta amfani da ''apt' utility. Kamar yadda yake tare da duk koyawa, tushen ko damar sudo ana ɗauka. Da fatan za a yi gyare-gyaren da suka dace zuwa umarni masu zuwa.

# apt-get install isc-dhcp-server 		[Installs the ISC DHCP Server software]
# dpkg --get-selections isc-dhcp-server		[Confirms successful installation]
# dpkg -s isc-dhcp-server 			[Alternative confirmation of installation]

2. Yanzu da aka tabbatar da shigar da software na uwar garke, yanzu ya zama dole a daidaita uwar garken tare da bayanan cibiyar sadarwar da zai buƙaci mikawa. A mafi ƙanƙanta, mai gudanarwa yana buƙatar sanin bayanan masu zuwa don ainihin iyakar DHCP:

  1. Adreshin cibiyar sadarwa
  2. Masu rufe fuska
  3. Yawancin adiresoshin da za a sanya su cikin kuzari

Sauran bayanai masu fa'ida don sanya uwar garken a zahiri sanyawa sun haɗa da:

  1. Tsoffin ƙofa
  2. Adreshin IP na uwar garken DNS
  3. Sunan yanki
  4. Sunan mai watsa shiri
  5. Adreshin Watsa Labarai na Yanar Gizo

Waɗannan kaɗan ne daga cikin zaɓuɓɓuka da yawa waɗanda uwar garken ISC DHCP ke iya ɗauka. Don samun cikakken jeri da bayanin kowane zaɓi, shigar da umarni mai zuwa bayan shigar da fakitin:

# man dhcpd.conf

3. Da zarar mai gudanarwa ya kammala duk bayanan da ake bukata don wannan uwar garken don ba da shi lokaci ya yi da za a saita uwar garken DHCP da kuma wuraren da ake bukata. Kafin ƙirƙirar kowane wuraren tafki ko saitunan uwar garken ko da yake, dole ne a saita sabis na DHCP don sauraron ɗaya daga cikin mu'amalar uwar garken.

A kan wannan sabar ta musamman, an saita ƙungiyar NIC kuma DHCP za ta saurari mahaɗan haɗin gwiwar da aka ba da suna bond0. Tabbatar yin canje-canje masu dacewa da aka ba uwar garken da yanayin da aka tsara komai. Matsalolin da ke cikin wannan fayil ba su da kyau don wannan koyawa.

Wannan layin zai umurci sabis na DHCP don sauraron zirga-zirgar DHCP akan ƙayyadadden mu'amala (s). A wannan gaba, lokaci yayi da za a canza babban fayil ɗin sanyi don kunna wuraren tafki na DHCP akan hanyoyin sadarwar da suka dace. Babban fayil ɗin daidaitawa yana a /etc/dhcp/dhcpd.conf. Bude fayil ɗin tare da editan rubutu don farawa:

# nano /etc/dhcp/dhcpd.conf

Wannan fayil ɗin shine ƙayyadaddun zaɓuɓɓukan uwar garken DHCP da duk wuraren tafki/ runduna wanda yake son saitawa. Babban fayil ɗin yana farawa da sashin 'ddns-update-style' kuma don wannan koyawa za ta kasance saita zuwa 'babu' duk da haka a cikin labarin nan gaba, Dynamic DNS za a rufe kuma za a haɗa ISC-DHCP-Server tare da BIND9 don kunna sunan mai masaukin baki zuwa sabunta adireshin IP.

4. Sashe na gaba shine yawanci yankin da kuma mai gudanarwa na iya saita saitunan cibiyar sadarwa na duniya kamar sunan yankin DNS, lokacin haya don adiresoshin IP, subnet-masks, da ƙari mai yawa. Don ƙarin sani game da duk zaɓuɓɓukan tabbatar da karanta shafin mutum don fayil ɗin dhcpd.conf.

# man dhcpd.conf

Don shigar da wannan uwar garken, akwai wasu zaɓuɓɓukan hanyar sadarwa na duniya guda biyu waɗanda aka saita a saman fayil ɗin daidaitawa don kada a aiwatar da su a cikin kowane tafkin da aka ƙirƙira.

Bari mu ɗauki ɗan lokaci don bayyana wasu daga cikin waɗannan zaɓuɓɓukan. Duk da yake an saita su a duniya a cikin wannan misali, duk ana iya daidaita su akan kowane tushen tafkin kuma.

  1. zaɓin domain-name \comptech.local; - Duk rundunan da wannan uwar garken DHCP ke yi, za su kasance memba na sunan yankin DNS \comptech. local”
  2. zaɓin yanki-suna-sabis 172.27.10.6; – DHCP za ta ba da adireshin IP na uwar garken DNS na 172.27.10.6 ga duk rundunonin da ke kan duk cibiyoyin sadarwar da aka saita don ɗaukar nauyinsu.
  3. zaɓin subnet-mask 255.255.255.0; - The subnet mask da aka raba ga kowace cibiyar sadarwa zai zama 255.255.255.0 ko /24
  4. Tsohon-lease-lokaci 3600; - Wannan shi ne lokacin a cikin daƙiƙa guda da kwangilar za ta kasance ta atomatik. Mai watsa shiri na iya sake neman irin wannan hayar idan lokaci ya kure ko kuma idan mai masaukin ya cika da yarjejeniyar, za su iya mika adireshin da wuri.
  5. max-lease-time 86400; - Wannan shi ne matsakaicin adadin lokacin a cikin daƙiƙa mai iya yin hayar mai gida.
  6. ping-check gaskiya; - Wannan ƙarin gwaji ne don tabbatar da cewa adireshin da uwar garken ke son sanyawa baya amfani da shi ta hanyar wani mai watsa shiri akan hanyar sadarwa. riga.
  7. ping-timeout; - Wannan shine tsawon lokacin da uwar garken zata jira amsa ga ping kafin a ɗauka cewa ba a amfani da adireshin. ku >
  8. yi watsi da sabuntawar abokin ciniki; –A yanzu wannan zaɓin bai da mahimmanci tunda an kashe DDNS a baya a cikin fayil ɗin daidaitawa amma lokacin da DDNS ke aiki, wannan zaɓin zai yi watsi da runduna don neman sabunta sunan mai watsa shiri a cikin DNS. ku >

5. Layi na gaba a cikin wannan fayil shine layin uwar garken DHCP mai iko. Wannan layin yana nufin cewa idan wannan uwar garken zai zama uwar garken da ke ba da adireshi don cibiyoyin sadarwar da aka saita a cikin wannan fayil ɗin, to, ba da amsa ga madaidaicin stanza.

Wannan uwar garken za ta kasance ita kaɗai ke da iko a kan duk hanyoyin sadarwar da take gudanarwa don haka ba a ba da amsa ba ta hanyar cire '#' a gaban ikon kalmar.