Linux 使用nmcli配置网络

Linux 使用nmcli配置网络

前提：
　　在虚拟机中添加一张桥接模式的网卡，如果是VirtualBox虚拟机中要shutdown才能添加。

1、启动NetworkManager工具，安装nmcli命令支持tab补全的包

[root@despotic ~]# systemctl start NetworkManager
[root@despotic ~]# yum install bash-completion -y
[root@despotic ~]# bash

安装完成之后就可以在nmcli配置的时候使用tab补全命令了

2、查看新增加的网卡信息和设备信息

[root@despotic ~]# nmcli device
DEVICE TYPE STATE CONNECTION
ens33 ethernet connected ens33
ens37 ethernet disconnected --
lo loopback unmanaged --
[root@despotic ~]# nmcli connection
NAME UUID TYPE DEVICE
ens33 e2301185-1a8d-4b12-b1c7-bfbdf84f7a50 --ethernet ens33 

可以看见ens37已经有了设备的信息，但是没有ens37网络连接的信息

3、添加网卡信息，此时可以看见ens37的信息

[root@despotic ~]# nmcli connection add type ethernet con-name ens37 ifname ens37 autoconnect yes
Connection 'ens37' (894ebf60-16c9---62ad5fb9b2b7) successfully added.
[root@despotic ~]# nmcli connection
NAME UUID TYPE DEVICE
ens33 e2301185-1a8d-4b12-b1c7-bfbdf84f7a50 --ethernet ens33
ens37 894ebf60-16c9---62ad5fb9b2b7 --ethernet ens37

4、为ens37配置ip地址等信息

[root@despotic ~]# nmcli connection modify ens37 ipv4.addresses "192.168.27.36/16" ipv4.gateway 192.168.0.1 ipv4.dns 192.168.0.1 ipv4.method manual connection.autoconnect yes connection.interface-name ens37
重新加载一下，启动ens37就可以看见ens37的网络信息了
[root@despotic ~]# nmcli connection reload
[root@despotic ~]# nmcli connection up ens37
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/)
[root@despotic ~]# nmcli connection show ens37 | grep ipv4
ipv4.method: manual
ipv4.dns: 192.168.0.1
ipv4.dns-search: --
ipv4.dns-options: (default)
ipv4.dns-priority:
ipv4.addresses: 192.168.27.36/
ipv4.gateway: 192.168.0.1
ipv4.routes: --
ipv4.route-metric: -
ipv4.ignore-auto-routes: no
ipv4.ignore-auto-dns: no
ipv4.dhcp-client-id: --
ipv4.dhcp-timeout:
ipv4.dhcp-send-hostname: yes
ipv4.dhcp-hostname: --
ipv4.dhcp-fqdn: --
ipv4.never-default: no
ipv4.may-fail: yes
ipv4.dad-timeout: - (default)
[root@despotic ~]# ifconfig
ens37: flags=<UP,BROADCAST,RUNNING,MULTICAST> mtu
inet 192.168.27.36 netmask 255.255.0.0 broadcast 192.168.255.255
inet6 fe80:::713d:ac99:83cc prefixlen  scopeid 0x20<link>
ether :0c::5f::9d txqueuelen  (Ethernet)
RX packets  bytes  (5.7 MiB)
RX errors  dropped  overruns  frame
TX packets  bytes  (12.2 KiB)
TX errors  dropped  overruns  carrier  collisions 

排除其他因素，此时就可以使用物理机ping同ens37的ip了
如果ping不通，请检查vmware的虚拟网络配置，防火墙等一切因素

5、如果不小心配置错误，可将配置信息删除重新配置（重复3-4步骤）

[root@despotic ~]# nmcli connection delete ens37
Connection 'ens37' (894ebf60-16c9---62ad5fb9b2b7) successfully deleted.
[root@despotic ~]# nmcli connection
NAME UUID TYPE DEVICE
ens33 e2301185-1a8d-4b12-b1c7-bfbdf84f7a50 --ethernet ens33

附加：
（1）给ens37再添加一个ip地址

[root@despotic ~]# nmcli connection modify ens37 +ipv4.addresses "192.168.27.37/16" ipv4.gateway 192.168.0.1
[root@despotic ~]# nmcli connection down ens37
Connection 'ens37' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/)
[root@despotic ~]# nmcli connection up ens37
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/)

可以看见ens37有两个ip

[root@despotic ~]# ip addr show ens37
: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu  qdisc pfifo_fast state UP qlen
link/ether :0c::5f::9d brd ff:ff:ff:ff:ff:ff
inet 192.168.27.36/ brd 192.168.255.255 scope global ens37
valid_lft forever preferred_lft forever
inet 192.168.27.37/ brd 192.168.255.255 scope global secondary ens37
valid_lft forever preferred_lft forever
inet6 fe80::8de7:fb4:1c03:22da/ scope link
valid_lft forever preferred_lft forever

（2）给ens37加一个ipv6的地址

[root@despotic ~]# nmcli connection modify ens37 ipv6.addresses ::/ ipv6.gateway :: ipv6.dns ::
[root@despotic ~]# nmcli connection reload
[root@despotic ~]# nmcli connection down ens37
Connection 'ens37' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/)
[root@despotic ~]# nmcli connection up ens37
Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/)

可以看见ens37中已经有了ipv6的地址

[root@despotic ~]# ifconfig
ens37: flags=<UP,BROADCAST,RUNNING,MULTICAST> mtu
inet 192.168.27.36 netmask 255.255.0.0 broadcast 192.168.255.255
inet6 fe80::8de7:fb4:1c03:22da prefixlen  scopeid 0x20<link>
inet6 :: prefixlen  scopeid 0x0<global>
ether :0c::5f::9d txqueuelen  (Ethernet)
RX packets  bytes  (6.4 MiB)
RX errors  dropped  overruns  frame
TX packets  bytes  (53.1 KiB)
TX errors  dropped  overruns  carrier  collisions 

ping一下也可以pin通

[root@despotic ~]# ping6 ::
PING ::(::)  data bytes
 bytes from ::: icmp_seq= ttl= time=0.121 ms
 bytes from ::: icmp_seq= ttl= time=0.128 ms
^C
--- :: ping statistics ---
 packets transmitted,  received, % packet loss, time 1000ms
rtt min/avg/max/mdev = 0.121/0.124/0.128/0.011 ms

注意：
有的时候配置可能没有ipv4.gateway这个选项，可用如下方式配置

ipv4.address "192.168.0.11/24 192.168.0.1"

使用ip addr show eth1 | grep ipv4 可以看见有一条是这样写的，这条信息包含了ip，掩码，网关

ipv.addresses { ip = 192.168.0.11/, gw = 192.168.0.1 }

本教程到此结束

如果有什么建议或者不明白的地方，欢迎留言或者私信我，看见第一时间回复

本人Linux菜鸟，还望各路Linux大神多多指教。

附：

nmcli参数和网络配置文件关系对照表

nmcli con mod	ifcfg-*文件
ipv4.method manual	BOOTRROTO=none
ipv4.method auto	BOOTRROTO=dhcp
ipv4.address "192.168.0.10/24 192.168.0.1"	IPAEDDR=192.168.0.10 PREFIX=24 GATEWAY=192.168.0.1
ipv4.dns 8.8.8.8	DNS=8.8.8.8
ipv4.dns-search example.com	DOMAIN=example.com
ipv4.ignore-auto-dns true	PEERNDS=no
connection.autoconnect yes	ONBOOT=yes
connection.id eth0	NAME=eth0
connection.interface-name eth0	DEVICE=eth0
802-3-ethernet.mac-address...	HWADDR=...