DNS用来做主机名和IP地址的解析 DHCP用来动态分配IP 这里要做的是，使DHCP在分配IP时，动态更新DNS的解析记录 服务器IP：192.168.0.202 客户端测试IP：192.168.0.240-250 1、DHCP [root@dd ~]# yum install dhcp.x86_64 -y [root@dd ~]# vim /etc/dhcp/dhcpd.conf 参考/usr/share/doc/dhcp*/dhcpd.conf.sample option domain-name "example.com"; option domain-name-servers 192.168.0.202; default-lease-time 600; max-lease-time 7200; log-facility local7; subnet 192.168.0.0 netmask 255.255.255.0 { range 192.168.0.240 192.168.0.250; option routers 192.168.0.1; } 最后需加入 ddns-update-style interim; update-conflict-detection false; key ddns { algorithm hmac-md5; secret MARnLjY0Har0LMmn8R/Biw==; }; zone example.com. { primary 192.168.0.202; key ddns; } 测试DHCP，使用另外一台虚拟机test，ip为自动获取，OK 2、DNS [root@dd mnt]# yum install bind.x86_64 bind-chroot.x86_64 -y [root@dd mnt]# dnssec-keygen -a HMAC-MD5 -b 128 -n HOST ddns [root@dd named]# /etc/init.d/named start 在/var/named/chroot/etc下cp -p rndc.key ddns.key 更改ddns为 key "ddns" { algorithm hmac-md5; secret "MARnLjY0Har0LMmn8R/Biw=="; }; 更改named.conf 添加include "/etc/ddns.key"; options { listen-on port 53 { any; }; 监听所有 // listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { any; }; 允许任何用户访问 recursion yes; dnssec-enable yes; dnssec-validation yes; dnssec-lookaside auto; /* Path to ISC DLV key */ bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic"; }; 向named.rfc1912.zones添加 zone "example.com" IN { type master; file "example.com.zone"; allow-update { key ddns; }; }; /var/named/复制cp -p named.localhost example.com.zone，写入如下内容： $TTL 1D @ IN SOA dd.example.com. root.example.com. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS dd.example.com. dd A 192.168.0.202 ThinkPad A 192.168.0.1 正向解析和动态更新到此就做完了，剩下可以做做反向解析和主从DNS 3、反向PTR记录 [root@dd named]# vim chroot/etc/named.rfc1912.zones zone "0.168.192.in-addr.arpa" IN { type master; file "example.com.ptr"; allow-update { none; }; };
[root@dd named]# cp -p named.loopback example.com.ptr $TTL 1D @ IN SOA dd.example.com. root.example.com. ( 0 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum NS dd.example.com. 202 PTR dd.example.com. 1 PTR ThinkPad.example.com.
[root@dd named]# dig -x 192.168.0.202 4、主从DNS (1)辅助DNS配置IP=192.168.0.210 另外一台主机安装DNS yum install bind bind-chroot 修改配置文件name.conf （同上） 编辑域文件： vim named.rfc1912.zones zone "example.com" IN { type slave; masters { 192.168.0.202; }; （指定主DNS的IP） file "slaves/example.com.zone"; （同步的A纪录文件） allow-update { none; }; }; 重启DNS后 /var/named/chroot/var/named/slaves目录下会生成example.com.zone（同步而来）
(2)主DNS配置（master）IP=192.168.0.202 vim named.rfc1912.zones zone "example.com" IN { type master; file "example.com.zone"; allow-transfer { 192.168.0.210; }; （允许210上的DNS同步，【any，192.168.0.0./24】） allow-update { none; }; }; 重启DNS (3)测试 任一台机子指定为辅助DNS做解析 vim /etc/resolv.conf nameserver 192.168.0.210(辅助DNS) dig dd.example.com
