【2】如果不需要防火墙服务，关闭如下
[root@vdevops ~]# systemctl stop firewalld #停止防火墙服务 [root@vdevops ~]# systemctl disable firewalld #禁止防火墙开机自启 Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service. Removed symlink /etc/systemd/system/basic.target.wants/firewalld.service. 3、SELinux [html] view plain copy print? [root@vdevops ~]# getenforce #查看SELINUX工作模式 Enforcing [root@vdevops ~]# sed -i 's/SELINUX=Enforcing/SELINUX=disabled/' /etc/selinux/config #禁用SELINUX [root@vdevops ~]# setenforce 0 #临时禁用SELINUX，无需重启
4、网络设置
【1】、设置静态IP和改变接口名称
[root@vdevops ~]# nmcli c modify eno16777736 ipv4.addresses 10.1.1.56/24 #设置静态IP [root@vdevops ~]# nmcli c modify eno16777736 ipv4.gateway 10.1.1.1 #设置网关 [root@vdevops ~]# nmcli c modify eno16777736 ipv4.dns 10.1.1.1 #设置DNS [root@vdevops ~]# nmcli c modify eno16777736 ipv4.method manual #设置ipv4的类型为静态 [root@vdevops ~]# nmcli c down eno16777736;nmcli c up eno16777736 #重启网络接口 Connection 'eno16777736' successfully deactivated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/0) Connection successfully activated (D-Bus active path: /org/freedesktop/NetworkManager/ActiveConnection/1) [root@vdevops ~]# nmcli d show eno16777736 #查看网络接口状态 GENERAL.DEVICE: eno16777736 GENERAL.TYPE: ethernet GENERAL.HWADDR: 00:0C:29:B6:F5:5E GENERAL.MTU: 1500 GENERAL.STATE: 100 (connected) GENERAL.CONNECTION: eno16777736 GENERAL.CON-PATH: /org/freedesktop/NetworkManager/ActiveConnection/1 WIRED-PROPERTIES.CARRIER: on IP4.ADDRESS[1]: 10.1.1.56/24 IP4.GATEWAY: 10.1.1.1 IP4.DNS[1]: 10.1.1.1 IP6.ADDRESS[1]: fe80::20c:29ff:feb6:f55e/64 IP6.GATEWAY: [root@vdevops ~]# ip addr show #查看IP状态 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eno16777736: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:0c:29:b6:f5:5e brd ff:ff:ff:ff:ff:ff inet 10.1.1.56/24 brd 10.1.1.255 scope global eno16777736 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:feb6:f55e/64 scope link valid_lft forever preferred_lft forever
【2】禁用IPV6
[root@vdevops ~]# vim /etc/default/grub #第六行，添加 GRUB_CMDLINE_LINUX="crashkernel=auto <span style="color:#FF0000;">ipv6.disable=1</span> rd.lvm.lv=centos/root rd.lvm.lv=centos/swap rhgb quiet" [root@vdevops ~]# grub2-mkconfig -o /boot/grub2/grub.cfg Generating grub configuration file ... Found linux image: /boot/vmlinuz-3.10.0-327.36.2.el7.x86_64 Found initrd image: /boot/initramfs-3.10.0-327.36.2.el7.x86_64.img Found linux image: /boot/vmlinuz-3.10.0-327.el7.x86_64 Found initrd image: /boot/initramfs-3.10.0-327.el7.x86_64.img Found linux image: /boot/vmlinuz-0-rescue-d1b9467b8b744a3db391f2c15fe58a94 Found initrd image: /boot/initramfs-0-rescue-d1b9467b8b744a3db391f2c15fe58a94.img done [root@vdevops ~]# reboot #重启系统
