Linux ip命令

IP命令

从centos7以前我们一直使用ifconfig命令来执行网络相关的任务,比如检查和配置网卡信息,但是ifconfig已经不再被维护,并且在最近版本的Linux中被废除了!ifconfig命令已经被ip命令所代替了。

ip 命令跟 ifconfig 命令有些类似,但是强力的多,他有许多新功能。ip 命令完成很多ifconfig命令无法完成的任务。

1、检查网卡信息

  • 检查网卡的诸如IP地址,子网等网络信息,使用ip addr show
  • 或者 #ip a 或者 #ip a s

ip addr show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: teql0: <NOARP> mtu 1500 qdisc noop state DOWN group default qlen 100

link/void

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

4: vlan80@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.8.4/24 scope global vlan80

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

..............................《省略》

9: vlan600@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.60.4/24 scope global vlan600

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

想查看某块网卡的信息,则命令为 # ip a s eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip a s vlan600

9: vlan600@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.60.4/24 scope global vlan600

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

2、启动/禁用网卡

ip link set eth0 up

ip link set eth0 down

3、为网卡分配IP地址以及其他网络信息

为网卡分配IP地址,使用下面命令:

ip addr add 192.168.20.250/255.255.255.0 dev eth0

删除的时候add 换成delete(或者del)

ip addr add 192.168.20.250/255.255.255.0 dev eth0

ifconfig

......

eth0 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

inet addr:192.168.20.250 Bcast:0.0.0.0 Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:4158 errors:0 dropped:0 overruns:0 frame:0

TX packets:17296 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:297557 TX bytes:1769714

Interrupt:196 Base address:0x3000

ip addr delete 192.168.13.4/255.255.255.0 dev vlan130

ip addr add 192.168.13.5/255.255.255.0 dev vlan130

ip a s vlan130

6: vlan130@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.13.5/24 scope global vlan130

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

//使用ip命令来设置广播地址。默认是没有设置广播地址的,设置广播地址的命令为

// ip addr add broadcast 192.168.1.255 dev eth0 // 暂时不好用

根据IP地址设置标准的广播地址 #ip addr add 192.168.1.10/24 brd + dev eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip addr add 192.168.1.10/24 brd + dev eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.10/24 brd 192.168.1.255 scope global eth0

valid_lft forever preferred_lft forever

4、为网卡添加别名(添加多个IP)

ip addr add 192.168.1.20/24 dev eth0 label eth0:1

ip addr add 192.168.1.20/24 dev eth0 label eth0:1

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

ip addr add 192.168.2.20/24 dev eth0 label eth0:2

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

inet 192.168.2.20/24 scope global eth0:2

valid_lft forever preferred_lft forever

ip addr add 192.168.3.20/24 dev eth0 label eth0:45

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

inet 192.168.2.20/24 scope global eth0:2

valid_lft forever preferred_lft forever

inet 192.168.3.20/24 scope global eth0:45

valid_lft forever preferred_lft forever

5、查看路由信息

ip route (show)

ip route get 192.168.60.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.60.0/24 dev vlan600 proto kernel scope link src 192.168.60.4

ip route get 192.168.60.1

192.168.60.1 dev vlan600 src 192.168.60.4

cache

ip route get 192.168.60.4

local 192.168.60.4 dev lo src 192.168.60.4

cache <local>

6、添加静态路由

{指令添加是临时有效;永久修改可以修改路由文件;ubuntu: /etc/network/interfaces}

添加默认路由

ip route add default via 192.168.1.150

ip addr add 192.168.70.1/24 dev eth0 label eth0:70

ip route add default via 192.168.70.1

RTNETLINK answers: File exists

ip route del default via 192.168.1.1

ip route add default via 192.168.70.1

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

修改某个网卡上的ip的路由??

ip route add 192.168.2.1 via 192.168.70.1 dev eth0

ip route add 192.168.2.1 via 192.168.70.1 dev eth0

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

删除路由

ip route del via 192.168.70.1

ip route del 192.168.2.1 via 192.168.70.1

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

ip route del via 192.168.70.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

ip route del 192.168.2.1 via 192.168.70.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

7、查看ARP表

ip neigh

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.8.1 dev vlan80 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 DELAY

8、修改ARP

添加 arp

ip neigh add 192.168.60.1 lladdr aa:bb:cc:dd:00:99 dev vlan90 nud perm

ip neigh add 192.168.60.1 lladdr aa:bb:cc:dd:00:99 dev vlan90 nud perm

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.8.1 dev vlan80 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.60.1 dev vlan90 lladdr aa:bb:cc:dd:00:99 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 REACHABLE

nud的意思是"neghbour state"(网络邻居状态),他的值可以是:

  1. perm - 永久有效并且只能被管理员删除
  2. noarp - 记录有效,但在生命周期过期后就允许被删除了
  3. stale - 记录有效,但可能已经过期
  4. reachable - 记录有效,但超时后就失效了

删除arp

ip neigh del 192.168.8.1 dev vlan80

ip neigh del 192.168.8.1 dev vlan80

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.60.1 dev vlan90 lladdr aa:bb:cc:dd:00:99 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 REACHABLE

9、查看网络统计信息

#ip -s link

查看网络统计信息,比如所有网卡上传输的字节数和报文数,错误或者丢弃的报文数等

ip -s link

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

RX: bytes packets errors dropped overrun mcast

32770129 394476 0 0 0 0

TX: bytes packets errors dropped carrier collsns

32770129 394476 0 0 0 0

2: teql0: <NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 100

link/void

RX: bytes packets errors dropped overrun mcast

0 0 0 0 0 0

TX: bytes packets errors dropped carrier collsns

0 0 0 0 0 0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

RX: bytes packets errors dropped overrun mcast

2544171 36344 0 0 0 0

TX: bytes packets errors dropped carrier collsns

23763484 231025 0 0 0 0

4: vlan80@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

RX: bytes packets errors dropped overrun mcast

0 0 0 0 0 0

TX: bytes packets errors dropped carrier collsns

0 0 0 0 0 0

..............................

10、设置VLAN

ip link add link eth0 name vlan500 type vlan id 500

ip link add link eth0 name vlan500 type vlan id 500

ifconfig

(这个是时候并未启动网卡)

ip a

..................

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

11: vlan500@eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip link set vlan500 up

..................

vlan200 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

inet addr:192.168.20.4 Bcast:0.0.0.0 Mask:255.255.255.0

inet6 addr: fe80::a8bb:ccff:fedd:4/64 Scope: Link

UP BROADCAST RUNNING NOARP MULTICAST MTU:1500 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:15743 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:0 TX bytes:1393636

vlan500 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:0 TX bytes:0

11、修改MAC

ip link set vlan500 address aa:bb:cc:dd:00:05

ip link set vlan500 address aa:bb:cc:dd:00:05

ip addr add 192.168.50.4/255.255.255.0 dev vlan500

#ip a

............

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

11: vlan500@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:05 brd ff:ff:ff:ff:ff:ff

inet 192.168.50.4/24 scope global vlan500

valid_lft forever preferred_lft forever

相关推荐
耶啵奶膘6 分钟前
uniapp-是否删除
linux·前端·uni-app
_.Switch1 小时前
高级Python自动化运维:容器安全与网络策略的深度解析
运维·网络·python·安全·自动化·devops
2401_850410831 小时前
文件系统和日志管理
linux·运维·服务器
qq_254674411 小时前
工作流初始错误 泛微提交流程提示_泛微协同办公平台E-cology8.0版本后台维护手册(11)–系统参数设置
网络
JokerSZ.1 小时前
【基于LSM的ELF文件安全模块设计】参考
运维·网络·安全
XMYX-02 小时前
使用 SSH 蜜罐提升安全性和记录攻击活动
linux·ssh
小松学前端4 小时前
第六章 7.0 LinkList
java·开发语言·网络
二十雨辰4 小时前
[linux]docker基础
linux·运维·docker
城南vision4 小时前
计算机网络——TCP篇
网络·tcp/ip·计算机网络