在CentOS 7配置IPv6 DNS Server

標籤：ldo   dom   oba   mini   header   when   The   nes   link   

以本人的機器為例，網卡為eth3，IPv6地址就選2000::ffff

[[email protected] ~]# uname -r
2.6.32-431.el6.x86_64

[[email protected] ~]# ifconfig eth3
eth3????? Link encap:Ethernet? HWaddr 00:1B:21:21:CF:DD ?
????????????? inet6 addr: 2000::ffff/64 Scope:Global
? ?? ???????? inet6 addr: 2000::21b:21ff:fe21:cfdd/64 Scope:Global
??? ? ?? ???? inet6 addr: fe80::21b:21ff:fe21:cfdd/64 Scope:Link
??????? ? ? ? UP BROADCAST RUNNING MULTICAST? MTU:1500? Metric:1
? ?? ???????? RX packets:100318 errors:0 dropped:0 overruns:0 frame:0
??? ? ?? ???? TX packets:150174 errors:0 dropped:0 overruns:0 carrier:0
??????? ? ? ? collisions:0 txqueuelen:1000
? ?? ???????? RX bytes:19520814 (18.6 MiB)? TX bytes:101293129 (96.6 MiB)
??? ? ?? ???? Interrupt:19 Memory:f7da0000-f7dc0000

1. 修改ifcfg-eth3

??? # vim /etc/sysconfig/network-scripts/ifcfg-eth3

???? 添加 DNS1=2000::ffff

2. 修改/etc/hosts

??? # vim /etc/hosts

??? 添加 2000::ffff??? lenovo-m8400-01.example.com ?? lenovo-m8400-01

3. 修改/etc/sysconfig/network

??? 修改 HOSTNAME=lenovo-m8400-01.example.com

4. 修改/etc/resolv.conf

??? search example.com
??? nameserver 2000::ffff

5. 重啟網路服務

???? # service network restart

6. 安裝bind相關包

??? # yum install bind*

7. 修改/etc/named.conf

???? options {

? ? ?? ? listen-on port 53 { 127.0.0.1; };?????????? ---> //listen-on port 53 { 127.0.0.1; };

? ? ? ?? listen-on-v6 port 53 { ::1; }; ???? ? ? ? ? ? ? ---> listen-on-v6 port 53 { 2000::ffff; };

???????? allow-query???? { localhost; };??????????????? ---> allow-query???? { any; };

???????? ...

???? };

8. 修改/etc/named.rfc1912.zones

??? 1）更改

??? zone "localhost.localdomain" IN {
?? ?? ? type master;
???? ?? file "named.localhost";
??????? allow-update { none; };
??? };

? ? 為

? ? zone "example.com" IN {
?? ? ??? type master;
??? ? ?? file "forward.zone";
???? ? ? allow-update { none; };
?? };

?? 2）更改

??? zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
?? ?? ?? type master;
?? ? ? ? file "named.loopback";
?? ?? ?? allow-update { none; };
? ? };
??? 為
??? zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa" IN {
?????? ? type master;
???????? file "reverse.zone";
???????? allow-update { none; };
?? };

9. 編輯forward.zone和reverse.zone

??? # cd /var/named

??? # cp named.localhost forward.zone

??? # cp named.loopback reverse.zone

??? forward.zone

??????? $TTL 1D
? ? ??? @ IN SOA example.com. root.example.com. (
??????????????????????????????????????? 0?????? ; serial
??????????????????????????????????????? 1D????? ; refresh
??????????????????????????????????????? 1H????? ; retry
??????????????????????????????????????? 1W????? ; expire
??????????????????????????????????????? 3H )??? ; minimum
?? ? ?? ? IN NS?? lenovo-m8400-01.example.com.
????????? lenovo-m8400-01 IN AAAA 2000::ffff

??? reverse.zone

??? $TTL 1D
??? @ IN SOA example.com. root.example.com. (
??????????????????????????????????????? 0?????? ; serial
??????????????????????????????????????? 1D????? ; refresh
??????????????????????????????????????? 1H????? ; retry
??????????????????????????????????????? 1W????? ; expire
??????????????????????????????????????? 3H )??? ; minimum
???? ? ? ? ? IN NS?? lenovo-m8400-01.example.com.
???? f.f.f.f??? IN PTR? lenovo-m8400-01.example.com.

???? # chgrp named forward.zone

???? # chgrp named reverse.zone

???? # service named start

10. 驗證配置

???? [[email protected] named]# dig lenovo-m8400-01.example.com AAAA

???? ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> lenovo-m8400-01.example.com AAAA
??? ;; global options: +cmd
??? ;; Got answer:
??? ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17812
??? ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

??? ;; QUESTION SECTION:
??? ;lenovo-m8400-01.example.com. IN AAAA

??? ;; ANSWER SECTION:
??? lenovo-m8400-01.example.com. 86400 IN AAAA 2000::ffff

??? ;; AUTHORITY SECTION:
??? example.com. 86400 IN?? ?NS?? ?lenovo-m8400-01.example.com.

??? ;; Query time: 0 msec
??? ;; SERVER: 2000::ffff#53(2000::ffff)
??? ;; WHEN: Tue Oct 13 17:01:31 2015
??? ;; MSG SIZE? rcvd: 101

??? [[email protected] named]# dig -x 2000::ffff

??? ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> -x 2000::ffff
??? ;; global options: +cmd
??? ;; Got answer:
??? ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1608
??? ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

??? ;; QUESTION SECTION:
??? ;f.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. IN PTR

??? ;; ANSWER SECTION:
??? f.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. 86400?? ?IN PTR lenovo-m8400-01.example.com.

??? ;; AUTHORITY SECTION:
??? 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. 86400?? ?IN NS lenovo-m8400-01.example.com.

??? ;; ADDITIONAL SECTION:
??? lenovo-m8400-01.example.com. 86400 IN AAAA 2000::ffff

??? ;; Query time: 0 msec
??? ;; SERVER: 2000::ffff#53(2000::ffff)
??? ;; WHEN: Tue Oct 13 17:32:49 2015
??? ;; MSG SIZE? rcvd: 187

在CentOS 7配置IPv6 DNS Server