---

---

 

1、DHCP工作过程

dhcp discover \\客户端请求服务器器提供地址

dhcp offer \\服务器提供ip地址

dhcp request \\客户端租用ip地址

dhcp ack \\服务器确认客户端的租用

2、安装dhcp软件包

# yum install dhcpd

# cd /etc/dhcpd

# cp /usr/share/doc/dhcp-4.1.1/dhcpd.conf.sample ./dhcpd.conf

3、配置DHCP

基本配置内容

确定ip地址所在的网络

设置需要分配的ip地址范围

设置分配ip地址的子网掩码

设置网关ip地址

设置dns地址

设置租期时间(默认租期时间和最大租期时间)

地址绑定(给一台设备分配一个固定的ip地址)

# vim dhcpd.conf

option domain-name "sxjy.com";

option domain-name-servers 8.8.8.8,202.103.96.112;

default-lease-time 3600;

max-lease-time 72000;

log-facility local7;

shared-network sxjy {

subnet 172.16.10.0 netmask 255.255.255.0 {

range 172.16.10.2 172.16.10.100;

range 172.16.10.200 172.16.10.250;

option routers 172.16.10.1;

option broadcast-address 172.16.10.255;

default-lease-time 7200;

max-lease-time 15400;

}

subnet 172.16.20.0 netmask 255.255.255.0 {

range 172.16.20.2 172.16.20.100;

range 172.16.20.200 172.16.20.250;

option routers 172.16.20.1;

option broadcast-address 172.16.20.255;

}

host ftp.sxjy.com {

hardware ethernet 00:0C:29:B6:DF:5E;

fixed-address 172.16.10.10;

fixed-address 172.16.10.10;

}

}

练习:用三台虚拟机,其中一台为服务器,两台为客户机,要求两台客户机能获取到服务器分配的不同网段的地址,例如一台

获取的地址为192.168.1.10/24,另一台为192.168.2.10/24,具体地址段可以自己定义,但不能给其它人分配

ip地址,在服务器上抓包观察ip分配情况

4、DHCP地址绑定

host ftp.sxjy.com {

hardware ethernet 00:0C:29:B6:DF:5E;

fixed-address 192.168.10.10;

}

5、DHCP中继配置

(1)开启中继服务器的路由转发功能

# vim /etc/sysctl.conf

net.ipv4.ip_forward = 1

# sysctl -p

(2)设置中继选项

# vim /etc/sysconfig/dhcrelay

INTERFACES="eth0 eth1"

DHCPSERVERS="172.16.10.1"

(3)启动dhcp中继服务

# service dhcrelay start

6、windows客户端的使用

ipconfig /renew \\重新获取ip地址

ipconfig /release \\释放ip地址

# dhclinet eth0

DHCP中继实验步骤：

(1)设置单网卡DHCP服务器，其上配置自己所在网段内的地址池，同时也需要配置其它网段地址池（该地址池中必须包含有option routers选项）。

[root@server2 ~]# cat /etc/dhcp/dhcpd.conf

ddns-update-style none;

option domain-name "sxjy.com";

option domain-name-servers 1.1.1.1;

default-lease-time 6000;

max-lease-time 7200;

log-facility local7;

#shared-network haha {

subnet 192.168.3.0 netmask 255.255.255.0 {

range 192.168.3.10 192.168.3.20; //其他网络的地址池

option domain-name-servers 2.2.2.2;

option routers 192.168.3.254; //该网关地址一定要指定

}

subnet 192.168.2.0 netmask 255.255.255.0 {

range 192.168.2.10 192.168.2.20; //该地址池为DHCP服务器自己所在网络的地址池

option domain-name-servers 2.2.2.2;

option routers 192.168.2.100;

}

自己的网卡为192.168.2.0网络

[root@server2 ~]# ip add show eth1

3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000

link/ether 00:0c:29:17:18:20 brd ff:ff:ff:ff:ff:ff

inet 192.168.2.100/24 brd 192.168.2.255 scope global eth1\

同时自己的网关还需要指向路由主机:

[root@server2 ~]# route|grep default

default 192.168.2.254 0.0.0.0 UG 0 0 0 eth1

(2)设置路由主机，同时承担DHCP中继的角色

该路由器连接DHCP服务器的网卡(eth0)IP为192.168.2.254，另一张网卡(eth1)必须为192.168.3.254(与步骤1中的地址池设置相匹配)

a、开启中继服务器的路由转发功能

# vim /etc/sysctl.conf

net.ipv4.ip_forward = 1

# sysctl -p

b、设置中继选项

# vim /etc/sysconfig/dhcrelay

INTERFACES="eth0 eth1"

DHCPSERVERS="172.16.10.1"

启动dhcrelay: service dhcrelay start

(3)设置客户端

该客户端的网卡链接路由器的eth1：

dhclient -r eth0;dhclient eth0

PS:路由器eht1和客户机eth0共用SW1的局域网。路由器eth0和DHCP服务器共用host-only的局域网。

---

路由器的DHCP

 

DHCP服务器的配置

Router(config)#interface fastEthernet 0/0

Router(config-if)#no shutdown

Router(config-if)#ip address 192.168.10.1 255.255.255.0

Router(config-if)#exit

Router(config)#ip dhcp pool xixi

Router(dhcp-config)#network 192.168.20.0 255.255.255.0

Router(dhcp-config)#default-router 192.168.20.1

Router(dhcp-config)#dns-server 8.8.8.8

Router(dhcp-config)#exit

Router(dhcp-config)#network 192.168.10.0 255.255.255.0

Router(dhcp-config)#default-router 192.168.10.2

Router(dhcp-config)#dns-server 8.8.8.8

Router(dhcp-config)#exit

Router(config)#ip route 0.0.0.0 0.0.0.0 192.168.10.2

中继代理的配置

Router(config)#interface fastEthernet 0/0

Router(config-if)#no shutdown

%LINK-5-CHANGED: Interface FastEthernet0/0, changed state to up

%LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/0, changed state to up

Router(config-if)#ip address 192.168.10.2 255.255.255.0

Router(config)#interface fastEthernet 0/1

Router(config-if)#no shutdown

Router(config-if)#ip address 192.168.20.1 255.255.255.0

Router(config-if)#ip helper-address 192.168.10.1

测试

主机上

PC>ipconfig /release

IP Address......................: 0.0.0.0

Subnet Mask.....................: 0.0.0.0

Default Gateway.................: 0.0.0.0

DNS Server......................: 0.0.0.0

PC>ipconfig /renew

IP Address......................: 192.168.20.2

Subnet Mask.....................: 255.255.255.0

Default Gateway.................: 192.168.20.1

DNS Server......................: 8.8.8.8

---