{"id":3777,"date":"2019-02-19T05:19:32","date_gmt":"2019-02-19T05:19:32","guid":{"rendered":"https:\/\/tst-amo.net.ua\/blog\/?p=3777"},"modified":"2019-02-23T16:31:12","modified_gmt":"2019-02-23T16:31:12","slug":"dhcp-%d0%bd%d0%b0-vlan-%d0%b0%d1%85","status":"publish","type":"post","link":"https:\/\/tst-amo.net.ua\/blog\/?p=3777","title":{"rendered":"DHCP \u043d\u0430 VLAN-\u0430\u0445"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-3828 size-full aligncenter\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2019\/02\/\u0421\u043d\u0438\u043c\u043e\u043a-\u044d\u043a\u0440\u0430\u043d\u0430-\u0432-2019-02-23-18-19-55.png\" alt=\"\" width=\"576\" height=\"431\" srcset=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2019\/02\/\u0421\u043d\u0438\u043c\u043e\u043a-\u044d\u043a\u0440\u0430\u043d\u0430-\u0432-2019-02-23-18-19-55.png 576w, https:\/\/tst-amo.net.ua\/blog\/wp-content\/uploads\/2019\/02\/\u0421\u043d\u0438\u043c\u043e\u043a-\u044d\u043a\u0440\u0430\u043d\u0430-\u0432-2019-02-23-18-19-55-300x224.png 300w\" sizes=\"(max-width: 576px) 100vw, 576px\" \/>\u0417\u0430\u0434\u0430\u0447\u0430 \u0440\u0430\u0437\u0431\u0438\u0442\u044c \u0441\u0435\u0442\u044c \u043d\u0430 VLAN \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 DHCP-server<\/p>\n<h4>VLAN<\/h4>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c vlan <a href=\"https:\/\/tst-amo.net.ua\/blog\/?p=2179\">\u043f\u043e \u043e\u0431\u0440\u0430\u0437\u0443 \u0438 \u043f\u043e\u0434\u043e\u0431\u0438\u044e<\/a>.<\/p>\n<pre># cat \/etc\/sysconfig\/network-scripts\/ifcfg-enp5s9.10\r\nVLAN=yes\r\nDEVICE=enp5s9.10\r\nPHYSDEV=enp5s9\r\nONBOOT=yes\r\nBOOTPROTO=\"static\"\r\nIPADDR=10.10.15.1\r\nPREFIX=24<\/pre>\n<pre># cat\u00a0\/etc\/sysconfig\/network-scripts\/ifcfg-enp5s9.90\r\nVLAN=yes\r\nDEVICE=enp5s9.90\r\nPHYSDEV=enp5s9\r\nONBOOT=yes\r\nBOOTPROTO=\"static\"\r\nIPADDR=10.90.90.1\r\nPREFIX=24<\/pre>\n<h4>DHCP<\/h4>\n<div class=\"para\">If more than one network interface is attached to the system, but the DHCP server should only be started on one of the interfaces, configure the DHCP server to start only on that device. In\u00a0<code class=\"filename\">\/etc\/sysconfig\/dhcpd<\/code>, add the name of the interface to the list of\u00a0<code class=\"command\">DHCPDARGS<\/code>:<\/div>\n<pre class=\"screen\"># Command line options here\r\nDHCPDARGS=\"enp5s9.10 enp5s9.90\"<\/pre>\n<p>\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e dhcpd \u043f\u0438\u0448\u0435\u0442 \u0434\u0432\u0430 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 log \u0444\u0430\u0439\u043b\u0430, \/var\/lib\/dhcpd\/dhcpd.leases \u2014 \u0441\u043f\u0438\u0441\u043e\u043a \u0432\u044b\u0434\u0430\u043d\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \/var\/log\/messages \u2014 \u043e\u0448\u0438\u0431\u043a\u0438 \u0438 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u043e\u0435, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0442\u043e\u043c \u0447\u0442\u043e \u0432 \/var\/log\/messages \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u043b\u043e\u0433\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e dhcpd \u043d\u043e \u0438 \u0432\u0441\u0435 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u043f\u043e\u0438\u0441\u043a \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u043e\u0439 \u0437\u0430\u0434\u0430\u0447\u0435\u0439. \u0414\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e \u0431\u044b \u043d\u0430\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0442\u043e\u043a \u043b\u043e\u0433\u043e\u0432 \u0432 \u043d\u0443\u0436\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0438 \u043d\u0435 \u0437\u0430\u0446\u0435\u043f\u0438\u0442\u044c \u043b\u0438\u0448\u043d\u0435\u0433\u043e \u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 log-facility \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u043b\u0438 \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 DHCP-\u0441\u0435\u0440\u0432\u0435\u0440\u0430.<\/p>\n<p>\u0421\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u043f\u043a\u0443 \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u0443\u0434\u0443\u0442 \u0445\u0440\u0430\u043d\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u0448\u0438 \u043b\u043e\u0433-\u0444\u0430\u0439\u043b\u044b:<\/p>\n<pre># mkdir \/var\/log\/dhcp\r\n<\/pre>\n<p>\u0421\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b logrotate \u0434\u0430\u0431\u044b \u0432\u0441\u0435 \u043d\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u043e\u0441\u044c \u0432 \u043e\u0434\u043d\u043e\u043c \u0444\u0430\u0439\u043b\u0435 \u0438 \u043f\u0435\u0440\u0438\u043e\u0434\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0447\u0438\u0449\u0430\u043b\u043e\u0441\u044c, \u0434\u043b\u044f \u044d\u0442\u043e\u0433\u043e \u0432 \u043f\u0430\u043f\u043a\u0435 \/etc\/logrotate.d\/ \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0444\u0430\u0439\u043b dhcpd \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435<\/p>\n<pre># cat \/etc\/logrotate.d\/dhcpd\r\n\/var\/log\/dhcp\/dhcpd.log {\r\n    rotate 4\r\n    missingok\r\n    daily\r\n    sharedscripts\r\n    create 0644 root root\r\n    postrotate\r\n\t\/bin\/kill -HUP `cat \/var\/run\/syslogd.pid 2&gt; \/dev\/null` 2&gt; \/dev\/null || true\r\n    endscript\r\n}<\/pre>\n<p>\u041d\u0443 \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u043d\u0430\u0448\u0435 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u0432 \u0444\u0430\u0439\u043b\u0435 \/etc\/rsyslog.conf \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u0441 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438 \u0431\u0443\u0434\u0435\u0442 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u0432\u0441\u0435 \u043d\u0430\u0448\u0438 \u043b\u043e\u0433\u0438 \u0432 \u043d\u0443\u0436\u043d\u044b\u0439 \u043d\u0430\u043c \u0444\u0430\u0439\u043b.<\/p>\n<pre># DHCPD Log file\r\nlocal5.*                                                \/var\/log\/dhcp\/dhcpd.log\r\n<\/pre>\n<p>\u0412 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 local5 \u0441\u043b\u0443\u0436\u0438\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043c\u0430\u0440\u043a\u0435\u0440\u0430, \u043f\u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c\u0443 \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0442\u043e\u043a \u043b\u043e\u0433\u043e\u0432 \u0432 \u043d\u0443\u0436\u043d\u043e\u0435 \u0440\u0443\u0441\u043b\u043e, \u0432\u0441\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0445 \u043c\u0430\u0440\u043a\u0435\u0440\u043e\u0432 7 \u0438 \u0435\u0441\u043b\u0438 \u044d\u0442\u043e \u0437\u0430\u043d\u044f\u0442\u044c \u0432\u044b \u0431\u0443\u0434\u0435\u0442\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0438\u0437 local1-7.<\/p>\n<p>\u041a\u043e\u043f\u0438\u0440\u0443\u0435\u043c \u043e\u0431\u0440\u0430\u0437\u0446\u044b<\/p>\n<pre># cp \/usr\/share\/doc\/dhcp*\/dhcpd.conf.example \/etc\/dhcp\/<\/pre>\n<p>\u041f\u0440\u0438\u0432\u043e\u0434\u0438\u043c \u043a \u0442\u0430\u043a\u043e\u043c\u0443 \u0432\u0438\u0434\u0443 dhcp.conf:<\/p>\n<pre>option domain-name \"my.server.com\";\r\noption domain-name-servers 192.168.113.1, 8.8.8.8;\r\ndefault-lease-time 600;\r\nmax-lease-time 7200;\r\nauthoritative;\r\nlog-facility local5;\r\n\r\n## START \u041f\u043e\u0442\u043e\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c\r\nsubnet 10.10.5.0 netmask 255.255.255.0 {\r\n}\r\n## END\r\n\r\n## VLAN 10 Pool\r\nsubnet 10.10.15.0 netmask 255.255.255.0 {\r\nrange 10.10.15.20 10.10.15.100;\r\noption routers 10.10.15.1;\r\noption domain-name \"my.server.com\";\r\noption domain-name-servers 192.168.113.1, 8.8.8.8;\r\noption broadcast-address 10.10.15.255;\r\ndefault-lease-time 600;\r\nmax-lease-time 7200;\r\n}\r\n\r\n## VLAN 90 Pool\r\nsubnet 10.90.90.0 netmask 255.255.255.0 {\r\nrange 10.90.90.40 10.90.90.100;\r\noption domain-name \"my.server.com\";\r\noption domain-name-servers 192.168.113.1, 8.8.8.8;\r\noption broadcast-address 10.90.90.255;\r\noption routers 10.90.90.1;\r\ndefault-lease-time 600;\r\nmax-lease-time 7200;\r\n}<\/pre>\n<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e \u043a\u0430\u043a \u0432\u0441\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u0434\u0430\u043d\u044b \u0438 \u0432\u0441\u0435 \u0444\u0430\u0439\u043b\u044b \u0437\u0430\u043f\u043e\u043b\u043d\u0435\u043d\u044b \u043d\u0443\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0435\u0439, \u043c\u043e\u0436\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c DHCP-\u0441\u0435\u0440\u0432\u0435\u0440, \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0435\u0433\u043e \u043d\u0430 \u0430\u0432\u0442\u043e\u0437\u0430\u043f\u0443\u0441\u043a \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0441\u0435 \u043b\u0438 \u0443 \u043d\u0430\u0441 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e<\/p>\n<pre>systemctl start dhcpd\r\nsystemctl enable dhcpd<\/pre>\n<h4>\u041c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u044f \u043c\u0435\u0436\u0434\u0443 VLAN<\/h4>\n<p>\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u041f\u041a \u0438\u0437 \u0440\u0430\u0437\u043d\u044b\u0445 VLAN \u043d\u0435 \u0432\u0438\u0434\u044f\u0442 \u0434\u0440\u0443\u0433 \u0434\u0440\u0443\u0433\u0430. \u041d\u043e \u0431\u044b\u0432\u0430\u044e\u0442 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u044d\u0442\u043e \u043d\u0443\u0436\u043d\u043e.<\/p>\n<pre><span class=\"skimlinks-unlinked\"># vim \/etc\/sysctel.conf \r\nnet.ipv4.ip_forward=<\/span>1\r\n\r\n# sysctl -p\r\n# service network restart<\/pre>\n<p>Add these two lines (place them according to your iptables file configuration):<\/p>\n<pre>if_lan10=\"enp5s9.10\"\r\nif_lan90=\"enp5s9.90\"<\/pre>\n<pre>-A FORWARD -i $if_lan10 -o $if_lan90 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT\r\n-A FORWARD -i $if_lan90 -o $if_lan10 -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT<\/pre>\n<p>&nbsp;<\/p>\n<div class=\"pdfprnt-buttons pdfprnt-buttons-post pdfprnt-bottom-right\"><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts3777&print=pdf\" class=\"pdfprnt-button pdfprnt-button-pdf\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/pdf.png\" alt=\"image_pdf\" title=\"View PDF\" \/><\/a><a href=\"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=wpv2posts3777&print=print\" class=\"pdfprnt-button pdfprnt-button-print\" target=\"_blank\"><img decoding=\"async\" src=\"https:\/\/tst-amo.net.ua\/blog\/wp-content\/plugins\/pdf-print\/images\/print.png\" alt=\"image_print\" title=\"Print Content\" \/><\/a><\/div>","protected":false},"excerpt":{"rendered":"<p>\u0417\u0430\u0434\u0430\u0447\u0430 \u0440\u0430\u0437\u0431\u0438\u0442\u044c \u0441\u0435\u0442\u044c \u043d\u0430 VLAN \u0438 \u043f\u043e\u0434\u043d\u044f\u0442\u044c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 DHCP-server VLAN \u0421\u043e\u0437\u0434\u0430\u0435\u043c vlan \u043f\u043e \u043e\u0431\u0440\u0430\u0437\u0443 \u0438 \u043f\u043e\u0434\u043e\u0431\u0438\u044e. # cat \/etc\/sysconfig\/network-scripts\/ifcfg-enp5s9.10 VLAN=yes DEVICE=enp5s9.10 PHYSDEV=enp5s9 ONBOOT=yes BOOTPROTO=&#8221;static&#8221; IPADDR=10.10.15.1 PREFIX=24 # cat\u00a0\/etc\/sysconfig\/network-scripts\/ifcfg-enp5s9.90 VLAN=yes DEVICE=enp5s9.90 PHYSDEV=enp5s9 ONBOOT=yes BOOTPROTO=&#8221;static&#8221; IPADDR=10.90.90.1 PREFIX=24 DHCP If more than one network interface is attached to the system, but the DHCP server should only be started &#8230;<\/p>\n<p><a href=\"https:\/\/tst-amo.net.ua\/blog\/?p=3777\" class=\"more-link\">Continue reading &lsquo;DHCP \u043d\u0430 VLAN-\u0430\u0445&rsquo; &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[48,222,47,38],"tags":[],"class_list":["post-3777","post","type-post","status-publish","format-standard","hentry","category-centos","category-dhcp","category-linux","category-vlan"],"_links":{"self":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3777"}],"collection":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3777"}],"version-history":[{"count":8,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3777\/revisions"}],"predecessor-version":[{"id":3830,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3777\/revisions\/3830"}],"wp:attachment":[{"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3777"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tst-amo.net.ua\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}