Web Integrated instance

Web Integrated instance

Requirements

L anyone can access the main site www.abc.com with the IP address 192.168.2.100. The homepage content is "web". The main directory is/var/www/html.

L The IP address mkt.abc.com of the marketing department is 192.168.2.100 to implement source control and only allow access from IP addresses in the 192.168.2.0/24 network segment.

The content on the home page is "mkt". The website directory is/var/www/mkt.

L The tec.abc.com IP address of the technical department site is 192.168.2.100 and can only be accessed through https. The homepage content is "tec". The website directory is/var/www/tec.

L The www server host is in the linux operating system REHL5.X.

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322505638-0.png "/>

1. Install httpd, mod_ssl, and bind services

2. edit/etc/httpd/conf/httpd. conf.

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322503F9-1.png "/>

Remove "#" before NameVirtualHost and add the following content at the end of the file:

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/032250Da-2.png "/>

3. Configure the dns Service

[Root @ RHEL chroot] # vim etc/named. conf

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/03225061K-3.png "width =" 520 "height =" 402 "/>

[Root @ RHEL chroot] # vim etc/named. rfc1912.zones adds the following content:

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322504Y6-4.png "/>

[Root @ RHEL chroot] # cd var/named/

[Root @ RHEL named] # vim abc.com. zone

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/03225064a-5.png "width =" 535 "height =" 171 "/>

4. create directory mkt tec and file index.html

[Root @ RHEL www] # mkdir mkt tec

[Root @ RHEL www] # echo "web"> html/index.html

[Root @ RHEL www] # echo "mkt"> mkt/index.html

[Root @ RHEL www] # echo "tec"> tec/index.html

5. Restart dns and httpd

[Root @ RHEL www] # service named restart

[Root @ RHEL www] # service httpd restart

6. Test a dns Client directed to 192.168.2.100

650) this. width = 650; "style =" width: 546px; height: pixel PX "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322506435-6.png "width =" 519 "height =" 424 "/>

Can be opened, but this does not meet the requirements of this topic

7. Perform source control on mkt.abc.com

Add the following content to the/etc/httpd/conf/httpd. conf file:

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322502P4-7.png "/>

After the service httpd restart is restarted, mkt.abc.com can only allow access from hosts in the 192.168.2.0/24 network segment.

8. Security CA has been configured for tec.abc.com)

Create a certs directory for storing certificates, requests, and private keys

[Root @ localhwsm tec] # mkdir certs

Generate Private Key

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322504462-8.png "/>

CREATE request

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322501Z5-9.png "/>

Publish a certificate on a CA

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/03225022M-10.png "/>

Associate tec.abc.com with the certificate

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/032250NE-11.png "/>

Edit vim/etc/httpd/conf/httpd. conf again as follows:

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/0322501H6-12.png "/>

650) this. width = 650; "border =" 0 "alt =" "src =" http://www.bkjia.com/uploads/allimg/131228/03225053Z-13.png "/> yes... 650) this. width = 650; "alt =" "src ="/neweditor/editor/images/smiley/16.gif"/>

This article is from the "Spider" blog, please be sure to keep this source http://abc16810.blog.51cto.com/3177586/1034841