在CentOS 7配置IPv6 DNS Server

以本人的機器爲例,網卡爲eth3,IPv6地址就選2000::ffff

[root@lenovo-m8400-01 ~]# uname -r
2.6.32-431.el6.x86_64

[root@lenovo-m8400-01 ~]# ifconfig eth3
eth3      Link encap:Ethernet  HWaddr 00:1B:21:21:CF:DD  
              inet6 addr: 2000::ffff/64 Scope:Global
              inet6 addr: 2000::21b:21ff:fe21:cfdd/64 Scope:Global
              inet6 addr: fe80::21b:21ff:fe21:cfdd/64 Scope:Link
              UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
              RX packets:100318 errors:0 dropped:0 overruns:0 frame:0
              TX packets:150174 errors:0 dropped:0 overruns:0 carrier:0
              collisions:0 txqueuelen:1000
              RX bytes:19520814 (18.6 MiB)  TX bytes:101293129 (96.6 MiB)
              Interrupt:19 Memory:f7da0000-f7dc0000

  1. 修改ifcfg-eth3

    # vim /etc/sysconfig/network-scripts/ifcfg-eth3

     添加 DNS1=2000::ffff

  1. 修改/etc/hosts

    # vim /etc/hosts

    添加 2000::ffff    lenovo-m8400-01.example.com    lenovo-m8400-01

  1. 修改/etc/sysconfig/network

    修改 HOSTNAME=lenovo-m8400-01.example.com

  1. 修改/etc/resolv.conf

    search example.com
    nameserver 2000::ffff

  1. 重啓網路服務

     # service network restart

  1. 安裝bind相關包

    # yum install bind*

  1. 修改/etc/named.conf

     options {

         listen-on port 53 { 127.0.0.1; };           ---> //listen-on port 53 { 127.0.0.1; };

         listen-on-v6 port 53 { ::1; };                  ---> listen-on-v6 port 53 { 2000::ffff; };

         allow-query     { localhost; };                ---> allow-query     { any; };

         ...

     };

  1. 修改/etc/named.rfc1912.zones

    1)更改

    zone "localhost.localdomain" IN {
        type master;
        file "named.localhost";
        allow-update { none; };
    };

    爲

    zone "example.com" IN {
         type master;
         file "forward.zone";
         allow-update { none; };
   };

   2)更改

    zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
         type master;
         file "named.loopback";
         allow-update { none; };
    };
    爲
    zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa" IN {
         type master;
         file "reverse.zone";
         allow-update { none; };
   };

  1. 編輯forward.zone和reverse.zone

    # cd /var/named

    # cp named.localhost forward.zone

    # cp named.loopback reverse.zone

    forward.zone

        $TTL 1D
        @ IN SOA example.com. root.example.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
          IN NS   lenovo-m8400-01.example.com.
          lenovo-m8400-01 IN AAAA 2000::ffff

    reverse.zone

    $TTL 1D
    @ IN SOA example.com. root.example.com. (
                                        0       ; serial
                                        1D      ; refresh
                                        1H      ; retry
                                        1W      ; expire
                                        3H )    ; minimum
             IN NS   lenovo-m8400-01.example.com.
     f.f.f.f    IN PTR  lenovo-m8400-01.example.com.

     # chgrp named forward.zone

     # chgrp named reverse.zone

     # service named start

  1. 驗證配置

     [root@lenovo-m8400-01 named]# dig lenovo-m8400-01.example.com AAAA

     ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> lenovo-m8400-01.example.com AAAA
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17812
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

    ;; QUESTION SECTION:
    ;lenovo-m8400-01.example.com. IN AAAA

    ;; ANSWER SECTION:
    lenovo-m8400-01.example.com. 86400 IN AAAA 2000::ffff

    ;; AUTHORITY SECTION:
    example.com. 86400 IN    NS    lenovo-m8400-01.example.com.

    ;; Query time: 0 msec
    ;; SERVER: 2000::ffff#53(2000::ffff)
    ;; WHEN: Tue Oct 13 17:01:31 2015
    ;; MSG SIZE  rcvd: 101

    [root@lenovo-m8400-01 named]# dig -x 2000::ffff

    ; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6_4.6 <<>> -x 2000::ffff
    ;; global options: +cmd
    ;; Got answer:
    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 1608
    ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

    ;; QUESTION SECTION:
    ;f.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. IN PTR

    ;; ANSWER SECTION:
    f.f.f.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. 86400    IN PTR lenovo-m8400-01.example.com.

    ;; AUTHORITY SECTION:
    0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.ip6.arpa. 86400    IN NS lenovo-m8400-01.example.com.

    ;; ADDITIONAL SECTION:
    lenovo-m8400-01.example.com. 86400 IN AAAA 2000::ffff

    ;; Query time: 0 msec
    ;; SERVER: 2000::ffff#53(2000::ffff)
    ;; WHEN: Tue Oct 13 17:32:49 2015
    ;; MSG SIZE  rcvd: 187

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章