Linux ip命令

IP命令

从centos7以前我们一直使用ifconfig命令来执行网络相关的任务,比如检查和配置网卡信息,但是ifconfig已经不再被维护,并且在最近版本的Linux中被废除了!ifconfig命令已经被ip命令所代替了。

ip 命令跟 ifconfig 命令有些类似,但是强力的多,他有许多新功能。ip 命令完成很多ifconfig命令无法完成的任务。

1、检查网卡信息

  • 检查网卡的诸如IP地址,子网等网络信息,使用ip addr show
  • 或者 #ip a 或者 #ip a s

ip addr show

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

inet 127.0.0.1/8 scope host lo

valid_lft forever preferred_lft forever

2: teql0: <NOARP> mtu 1500 qdisc noop state DOWN group default qlen 100

link/void

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

4: vlan80@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.8.4/24 scope global vlan80

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

..............................《省略》

9: vlan600@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.60.4/24 scope global vlan600

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

想查看某块网卡的信息,则命令为 # ip a s eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip a s vlan600

9: vlan600@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.60.4/24 scope global vlan600

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

2、启动/禁用网卡

ip link set eth0 up

ip link set eth0 down

3、为网卡分配IP地址以及其他网络信息

为网卡分配IP地址,使用下面命令:

ip addr add 192.168.20.250/255.255.255.0 dev eth0

删除的时候add 换成delete(或者del)

ip addr add 192.168.20.250/255.255.255.0 dev eth0

ifconfig

......

eth0 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

inet addr:192.168.20.250 Bcast:0.0.0.0 Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:4158 errors:0 dropped:0 overruns:0 frame:0

TX packets:17296 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:297557 TX bytes:1769714

Interrupt:196 Base address:0x3000

ip addr delete 192.168.13.4/255.255.255.0 dev vlan130

ip addr add 192.168.13.5/255.255.255.0 dev vlan130

ip a s vlan130

6: vlan130@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.13.5/24 scope global vlan130

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

//使用ip命令来设置广播地址。默认是没有设置广播地址的,设置广播地址的命令为

// ip addr add broadcast 192.168.1.255 dev eth0 // 暂时不好用

根据IP地址设置标准的广播地址 #ip addr add 192.168.1.10/24 brd + dev eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip addr add 192.168.1.10/24 brd + dev eth0

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.10/24 brd 192.168.1.255 scope global eth0

valid_lft forever preferred_lft forever

4、为网卡添加别名(添加多个IP)

ip addr add 192.168.1.20/24 dev eth0 label eth0:1

ip addr add 192.168.1.20/24 dev eth0 label eth0:1

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

ip addr add 192.168.2.20/24 dev eth0 label eth0:2

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

inet 192.168.2.20/24 scope global eth0:2

valid_lft forever preferred_lft forever

ip addr add 192.168.3.20/24 dev eth0 label eth0:45

ip a s eth0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.1.20/24 scope global eth0:1

valid_lft forever preferred_lft forever

inet 192.168.2.20/24 scope global eth0:2

valid_lft forever preferred_lft forever

inet 192.168.3.20/24 scope global eth0:45

valid_lft forever preferred_lft forever

5、查看路由信息

ip route (show)

ip route get 192.168.60.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.60.0/24 dev vlan600 proto kernel scope link src 192.168.60.4

ip route get 192.168.60.1

192.168.60.1 dev vlan600 src 192.168.60.4

cache

ip route get 192.168.60.4

local 192.168.60.4 dev lo src 192.168.60.4

cache <local>

6、添加静态路由

{指令添加是临时有效;永久修改可以修改路由文件;ubuntu: /etc/network/interfaces}

添加默认路由

ip route add default via 192.168.1.150

ip addr add 192.168.70.1/24 dev eth0 label eth0:70

ip route add default via 192.168.70.1

RTNETLINK answers: File exists

ip route del default via 192.168.1.1

ip route add default via 192.168.70.1

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

修改某个网卡上的ip的路由??

ip route add 192.168.2.1 via 192.168.70.1 dev eth0

ip route add 192.168.2.1 via 192.168.70.1 dev eth0

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

删除路由

ip route del via 192.168.70.1

ip route del 192.168.2.1 via 192.168.70.1

ip route

default via 192.168.70.1 dev eth0

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

ip route del via 192.168.70.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.2.1 via 192.168.70.1 dev eth0

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

ip route del 192.168.2.1 via 192.168.70.1

ip route

192.168.1.0/24 dev eth0 proto kernel scope link src 192.168.1.20

192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.20

192.168.3.0/24 dev eth0 proto kernel scope link src 192.168.3.20

192.168.8.0/24 dev vlan80 proto kernel scope link src 192.168.8.4

192.168.70.0/24 dev eth0 proto kernel scope link src 192.168.70.1

7、查看ARP表

ip neigh

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.8.1 dev vlan80 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 DELAY

8、修改ARP

添加 arp

ip neigh add 192.168.60.1 lladdr aa:bb:cc:dd:00:99 dev vlan90 nud perm

ip neigh add 192.168.60.1 lladdr aa:bb:cc:dd:00:99 dev vlan90 nud perm

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.8.1 dev vlan80 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.60.1 dev vlan90 lladdr aa:bb:cc:dd:00:99 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 REACHABLE

nud的意思是"neghbour state"(网络邻居状态),他的值可以是:

  1. perm - 永久有效并且只能被管理员删除
  2. noarp - 记录有效,但在生命周期过期后就允许被删除了
  3. stale - 记录有效,但可能已经过期
  4. reachable - 记录有效,但超时后就失效了

删除arp

ip neigh del 192.168.8.1 dev vlan80

ip neigh del 192.168.8.1 dev vlan80

ip neigh

192.168.60.1 dev vlan600 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.20.3 dev vlan200 lladdr aa:bb:cc:dd:00:03 PERMANENT

192.168.15.1 dev vlan150 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.24.1 dev vlan240 lladdr aa:bb:cc:dd:00:01 PERMANENT

192.168.60.1 dev vlan90 lladdr aa:bb:cc:dd:00:99 PERMANENT

192.168.9.199 dev vlan90 lladdr 02:aa:bb:cc:dd:00 STALE

192.168.9.102 dev vlan90 lladdr aa:bb:cc:dd:00:99 REACHABLE

9、查看网络统计信息

#ip -s link

查看网络统计信息,比如所有网卡上传输的字节数和报文数,错误或者丢弃的报文数等

ip -s link

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000

link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00

RX: bytes packets errors dropped overrun mcast

32770129 394476 0 0 0 0

TX: bytes packets errors dropped carrier collsns

32770129 394476 0 0 0 0

2: teql0: <NOARP> mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 100

link/void

RX: bytes packets errors dropped overrun mcast

0 0 0 0 0 0

TX: bytes packets errors dropped carrier collsns

0 0 0 0 0 0

3: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP mode DEFAULT group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

RX: bytes packets errors dropped overrun mcast

2544171 36344 0 0 0 0

TX: bytes packets errors dropped carrier collsns

23763484 231025 0 0 0 0

4: vlan80@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

RX: bytes packets errors dropped overrun mcast

0 0 0 0 0 0

TX: bytes packets errors dropped carrier collsns

0 0 0 0 0 0

..............................

10、设置VLAN

ip link add link eth0 name vlan500 type vlan id 500

ip link add link eth0 name vlan500 type vlan id 500

ifconfig

(这个是时候并未启动网卡)

ip a

..................

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

11: vlan500@eth0: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

ip link set vlan500 up

..................

vlan200 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

inet addr:192.168.20.4 Bcast:0.0.0.0 Mask:255.255.255.0

inet6 addr: fe80::a8bb:ccff:fedd:4/64 Scope: Link

UP BROADCAST RUNNING NOARP MULTICAST MTU:1500 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:15743 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:0 TX bytes:1393636

vlan500 Link encap:Ethernet HWaddr aa:bb:cc:dd:00:04

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:0 errors:0 dropped:0 overruns:0 frame:0

TX packets:0 errors:0 dropped:0 overruns:0 carrier:0

collisions:0 txqueuelen:1000

RX bytes:0 TX bytes:0

11、修改MAC

ip link set vlan500 address aa:bb:cc:dd:00:05

ip link set vlan500 address aa:bb:cc:dd:00:05

ip addr add 192.168.50.4/255.255.255.0 dev vlan500

#ip a

............

10: vlan240@eth0: <BROADCAST,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:04 brd ff:ff:ff:ff:ff:ff

inet 192.168.24.4/24 scope global vlan240

valid_lft forever preferred_lft forever

inet6 fe80::a8bb:ccff:fedd:4/64 scope link

valid_lft forever preferred_lft forever

11: vlan500@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000

link/ether aa:bb:cc:dd:00:05 brd ff:ff:ff:ff:ff:ff

inet 192.168.50.4/24 scope global vlan500

valid_lft forever preferred_lft forever

相关推荐
小政同学5 小时前
【NFS故障】共享的文件无法执行
linux·运维·服务器
AI木马人5 小时前
3.【Prompt工程实战】如何设计一个可复用的Prompt系统?(避免每次手写提示词)
linux·服务器·人工智能·深度学习·prompt
ch3nyuyu6 小时前
Ubuntu(乌班图)基础指令
linux·运维·网络
minglie16 小时前
gcc编译器汇总
linux
其实防守也摸鱼7 小时前
软件安全与漏洞--6、软件安全需求分析
网络·安全·网络安全·软件需求·等保·法律
firstacui7 小时前
MGRE实验
运维·服务器·网络
白菜欣8 小时前
Linux —《开发三件套:gcc/g++、gdb、make/Makefile 全解析》
linux·运维
senijusene8 小时前
基于 imx6ull平台按键驱动开发:input子系统+中断子系统+platform总线
linux·驱动开发
大卡片8 小时前
IO模型与并发服务器设计
运维·服务器·网络
莎士比亚的文学花园9 小时前
Linux驱动开发(1)——系统移植
linux·运维·服务器