配置與管理dns服務(wù)器

1、Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目實(shí)訓(xùn)教程,楊云 馬立新 楊建新 編著 中國水利水電出版社,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-

2、ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemd

3、g.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhon

4、gtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www

5、.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.083

6、8mlj.com,項(xiàng)目6 配置與管理DNS服務(wù)器,主講教師 XXXX,1. 項(xiàng)目課題引入,2. DNS服務(wù)工作原理,4. DNS服務(wù)器的配置,5. DNS客戶端配置,6. 現(xiàn)場演示案例,3. DNS服務(wù)的安裝與啟動(dòng),項(xiàng)目6 配置與管理DNS服務(wù)器,課題引入--項(xiàng)目背景某企業(yè)有一個(gè)局域網(wǎng)（192.168.1.0/24），網(wǎng)絡(luò)拓?fù)淙缦聢D所示。該企業(yè)中已經(jīng)有自己的網(wǎng)頁，員工希望通過域名來進(jìn)行訪問，同時(shí)員工也需要訪問 Internet 上

7、的網(wǎng)站。該企業(yè)已經(jīng)申請(qǐng)了域名 jnrplinux.com，公司需要 Internet 上的用戶通過域名訪問公司的網(wǎng)頁。為了保證可靠，不能因?yàn)镈NS 的故障，導(dǎo)致網(wǎng)頁不能訪問。,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://w

8、ww.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http:/

9、/www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http:/

10、/www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com h

11、ttp://www.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http:

12、//www.0838mlj.com,項(xiàng)目配置需求 現(xiàn)要求在企業(yè)內(nèi)部構(gòu)建一臺(tái) DNS服務(wù)器，為局域網(wǎng)中的計(jì)算機(jī)提供域名解析服務(wù)。DNS服務(wù)器管理 jnrplinux.com 域的域名解析，DNS服務(wù)器的域名為dns.jnrplinux.com，IP地址為192.168.1.2。輔助DNS服務(wù)器的IP地址為192.168.1.3。同時(shí)還必須為客戶提供Internet上的主機(jī)的域名解析。要求分別能解析以下域名：財(cái)務(wù)部（cw.jnrplinu

13、x.com：192.168.1.11），銷售部(xs.jnrplinux.com：192.168.1.12)，經(jīng)理部(jl.jnrplinux.com：192.168.1.13)，OA系統(tǒng)(oa. jnrplinux.com：192.168.1.13)。,項(xiàng)目分析本項(xiàng)目對(duì)應(yīng)的工作任務(wù)：1.企業(yè)DNS服務(wù)器的安裝2.企業(yè)主DNS服務(wù)器的配置3.企業(yè)輔助DNS服務(wù)器的配置4.企業(yè)轉(zhuǎn)發(fā)器DNS服務(wù)器的配置5.DNS客戶端的配置6

14、.DNS服務(wù)器的故障檢測與排除,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http:/

15、/www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oem

16、dg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://ww

17、w.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizifn.com http:/

18、/www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,項(xiàng)目分析完成職業(yè)任務(wù)需要的專業(yè)知識(shí)：1.DNS服務(wù)工作原理2.DNS服務(wù)的安裝3.主DNS服務(wù)器的配

19、置與管理4.輔助DNS服務(wù)器的配置與管理5.DNS客戶端的配置,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbri

20、ghtness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.

21、com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.18

22、9286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www

23、.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,教學(xué)目標(biāo)1.DNS服務(wù)的工作原理(理解)2.DNS服務(wù)的安裝與啟動(dòng)（

24、掌握）3.主DNS服務(wù)器的配置（重點(diǎn)掌握）4.輔助DNS服務(wù)器的配置（掌握）5.DNS客戶端的配置（熟悉）,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxr

25、t.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnp

26、x.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.n

27、tn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://ww

28、w.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,應(yīng)達(dá)到的職業(yè)能力1.能熟

29、練配置與管理主DNS服務(wù)器2.能熟練配置與管理輔助DNS服務(wù)器3.能熟練配置DNS客戶端的配置4.能熟練完成關(guān)于DNS服務(wù)的故障排除,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com ht

30、tp://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com htt

31、p://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com

32、 http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.

33、com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,

34、1. DNS服務(wù)概述,2. DNS域名空間結(jié)構(gòu),3. DNS域名解析過程,項(xiàng)目問題1－ DNS 服務(wù)工作原理,DNS服務(wù)概述DNS（Domain Name Service，域名系統(tǒng)）是一個(gè)分布式數(shù)據(jù)庫系統(tǒng)，其作用將域名解析成IP地址。域名系統(tǒng)允許用戶使用友好的名字而不是難以記憶的數(shù)字——IP地址來訪問Internet上的主機(jī)。,DNS域名空間結(jié)構(gòu),DNS域名解析過程,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc

35、.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.s

36、j93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjig

37、z.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgx

38、cpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.my

39、nzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,DNS域名解析過程（1）客戶機(jī)提出域名解析請(qǐng)求，并將該請(qǐng)求發(fā)送給本地的域名服務(wù)器。（2）本地的域名服務(wù)器收到請(qǐng)求后，先查詢本地的緩存，如果有該紀(jì)錄項(xiàng)，則本地的域名服務(wù)器就直接把查詢的結(jié)果返回。（3）如

40、果本地的緩存中沒有該記錄，則本地域名服務(wù)器把請(qǐng)求發(fā)給根域名服務(wù)器，根域名服務(wù)器返回給本地域名服務(wù)器一個(gè)所查詢域（根的子域）的主域名服務(wù)器的地址。（4）本地服務(wù)器向上一步返回的域名服務(wù)器發(fā)送請(qǐng)求，接受請(qǐng)求的服務(wù)器查詢自己的緩存，如果沒有該紀(jì)錄，則返回相關(guān)的下級(jí)域名服務(wù)器的地址。（5）重復(fù)第四步,直到找到正確的紀(jì)錄。（6）本地域名服務(wù)器將結(jié)果返回給客戶機(jī)；同時(shí)把返回的結(jié)果保存到緩存，以備下次使用。,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目ht

41、tp://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.c

42、om http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com ht

43、tp://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com

44、 http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.co

45、m http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,項(xiàng)目問題2－DNS服務(wù)的安裝與啟動(dòng),2. DNS服務(wù)的啟動(dòng)與停止,1. DNS服務(wù)的安裝,3. DNS服務(wù)配置文件,DNS 服務(wù)對(duì)應(yīng)的軟件包與DNS服務(wù)相關(guān)的軟件包有以下幾個(gè)

46、：bind：DNS服務(wù)器軟件包。bind-utils：DNS測試工具，包括dig，host與nslookup等。bind-chroot：使BIND運(yùn)行在指定的目錄中的安全增強(qiáng)工具。caching-nameserver：高速緩存DNS服務(wù)器的基本配置文件，建議一定安裝。,DNS 服務(wù)的安裝檢查DNS服務(wù)對(duì)應(yīng)的軟件包是否安裝，如果沒有安裝的話，進(jìn)行安裝：,DNS 服務(wù)的啟動(dòng)與停止,DNS 服務(wù)的配置文件主配置文件：/etc/na

47、med.conf區(qū)文件目錄： /var/named/chroot/var/named區(qū)文件： named.ca localhost.zone named.local,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.

48、com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoe

49、m.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-z

50、t.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.

51、0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljn

52、zf.com http://www.0838mlj.com,/etc/named.conf,named.ca,localhost.zone,named.local,項(xiàng)目問題3 DNS服務(wù)器的配置,1. 主DNS服務(wù)器的配置,2. 輔助DNS服務(wù)器的配置,3. 轉(zhuǎn)發(fā)器DNS服務(wù)器的配置,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.

53、com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.18928

54、8.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-z

55、t.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xun

56、chi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynz

57、g.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,1.主DNS服務(wù)器的配置編輯/etc/named.conf文件，添加“jnrplinux.com”正向區(qū)域及“1.168.192.in-addr.arpa”反向區(qū)域。,1.主DNS服務(wù)器的配置創(chuàng)建jnrplinux.com.zone正向數(shù)據(jù)庫文件,1.主DNS服務(wù)器的配置創(chuàng)建1.zone

58、反向數(shù)據(jù)庫文件,1.主DNS服務(wù)器的配置啟動(dòng)DNS服務(wù),Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt.com http://www.topbrightne

59、ss.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx.com http://www.skfjk.com h

60、ttp://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.ntn-zt.com http://www.189286.

61、com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www.189287.com http://www.nizi

62、fn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,2.輔助DNS服務(wù)器的配置在192.168.1.3輔助DNS服務(wù)器上，編輯/et

63、c/named.conf文件，添加jnrplinux.com區(qū)域。,2.輔助DNS服務(wù)器的配置在主DNS服務(wù)器上編輯/etc/named.conf文件的options選項(xiàng)，設(shè)置允許進(jìn)行區(qū)域傳輸。,3.轉(zhuǎn)發(fā)器DNS服務(wù)器的配置轉(zhuǎn)發(fā)器是在named.conf文件中的options區(qū)段設(shè)置的。主要用到兩個(gè)配置選項(xiàng)：forwarders：指定要把查詢請(qǐng)求轉(zhuǎn)發(fā)到的遠(yuǎn)程域名服務(wù)器的IP地址。 forwarders { ip_addr

64、 [port ip_port] ;} forward：啟用域名轉(zhuǎn)發(fā)功能。 forward only,Linux網(wǎng)絡(luò)服務(wù)器配置管理項(xiàng)目http://www.ort-zc.com/ http://www.scnzf.com http://www.lknzg.com http://www.0838mlj.com http://www.5sbj.com http://www.light-ks.com http://www.jnxrt

65、.com http://www.topbrightness.com http://www.hd8go.com http://www.hd88go.com http://www.sj93.cn http://www.oemgc.com http://www.189288.com http://www.hzp580.com http://www.yjoem.com http://www.oemdg.com http://www.xcdnpx

66、.com http://www.skfjk.com http://www.oemdg.com http://www.zhongtezc.com http://www.yanjigz.com http://www.zg-nsk.com http://www.skf-zt.cn http://www.nsk-zt.com http://www.fag-zt.com http://www.zhongtezc.com http://www.nt

67、n-zt.com http://www.189286.com http://www.xcdnpx.com http://www.dgxcdn.com http://www.dgxcpx.com http://www.xcwxpx.com http://www.xunchi-px.com http://www.oemfy.com http://www.0759mz.com http://www.lczx188.com http://www

68、.189287.com http://www.nizifn.com http://www.mynzf.com http://www.mynzf.com http://www.mynzg.com http://www.mynzg.com http://www.mynzg.com http://www.mljsgf.com http://www.mljnzf.com http://www.0838mlj.com,3.轉(zhuǎn)發(fā)器DNS服務(wù)器的配置

69、在/etc/named.conf中可以在options段中使用forwarders和forward指令設(shè)置DNS轉(zhuǎn)發(fā)： options { forwarders { 192.168.1.110; 192.168.1.112; }; forward first; }