[root@nfs-server ~]# ifconfig

ens32: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500

        inet 192.168.152.134  netmask 255.255.255.0  broadcast 192.168.152.255

        inet6 fe80::e33a:cec4:b0d4:c884  prefixlen 64  scopeid 0x20<link>

        ether 00:0c:29:f7:dc:59  txqueuelen 1000  (Ethernet)

        RX packets 241828  bytes 275307222 (262.5 MiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 7200  bytes 1083100 (1.0 MiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536

        inet 127.0.0.1  netmask 255.0.0.0

        inet6 ::1  prefixlen 128  scopeid 0x10<host>

        loop  txqueuelen 1  (Local Loopback)

        RX packets 327  bytes 33260 (32.4 KiB)

        RX errors 0  dropped 0  overruns 0  frame 0

        TX packets 327  bytes 33260 (32.4 KiB)

        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

[root@nfs-server ~]# ifconfig ens32 192.168.152.135

[root@nfs-server ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask       Flags Metric Ref   Use Iface

192.168.152.0   0.0.0.0         255.255.255.0   U     0      0        0 ens32

[root@nfs-server ~]# route add default gw 192.168.152.2

[root@nfs-server ~]# route -n

Kernel IP routing table

Destination     Gateway         Genmask       Flags Metric Ref  Use Iface

0.0.0.0         192.168.152.2   0.0.0.0         UG    0      0        0 ens32

192.168.152.0   0.0.0.0         255.255.255.0   U     0      0        0 ens32

[root@nfs-server ~]# cat /etc/resolv.conf

# Generated by NetworkManager

search localdomain

nameserver 192.168.152.2

nameserver 202.106.0.20

[root@nfs-server ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens32

TYPE=Ethernet

BOOTPROTO=dhcp

IPADDR=192.168.152.134

NETMASK=255.255.255.0

GATEWAY=192.168.152.2

DNS1=192.168.152.2

DNS2=202.106.0.20

DEFROUTE=yes

PEERDNS=yes

PEERROUTES=yes

IPV4_FAILURE_FATAL=no

IPV6INIT=yes

IPV6_AUTOCONF=yes

IPV6_DEFROUTE=yes

IPV6_PEERDNS=yes

IPV6_PEERROUTES=yes

IPV6_FAILURE_FATAL=no

IPV6_ADDR_GEN_MODE=stable-privacy

NAME=ens32

UUID=9eff3909-2614-4df9-80c9-a6a7d9f1be28

DEVICE=ens32

ONBOOT=yes

[root@nfs-server ~]# systemctl restart network

[root@proxy-nfs ~]# scp /etc/hosts web01:/tmp

The authenticity of host ‘web01 (192.168.152.135)‘ can‘t be established.

ECDSA key fingerprint is 4c:ee:a3:f1:5c:37:43:32:bd:06:4e:cc:3f:5a:0a:04.

Are you sure you want to continue connecting (yes/no)? yes

Warning: Permanently added ‘web01,192.168.152.135‘ (ECDSA) to the list of known hosts.

root@web01‘s password:

hosts                                                                     100%  274     0.3KB/s   00:00   

[root@proxy-nfs ~]# scp web01:/tmp/hosts .

root@web01‘s password:

hosts                                                                     100%  274     0.3KB/s   00:00   

[root@proxy-nfs ~]# ls -l hosts

-rw-r--r-- 1 root root 274 Mar 21 15:05 hosts

[root@proxy-nfs ~]# ssh-keygen

Generating public/private rsa key pair.

Enter file in which to save the key (/root/.ssh/id_rsa):

Enter passphrase (empty for no passphrase):

Enter same passphrase again:

Your identification has been saved in /root/.ssh/id_rsa.

Your public key has been saved in /root/.ssh/id_rsa.pub.

The key fingerprint is:

29:90:f7:3a:24:0a:e2:f9:22:ec:f4:07:75:7c:10:6b root@proxy-nfs

The key‘s randomart image is:

+--[ RSA 2048]----+

|       ..        |

|     . ..        |

|    o oE.        |

|     +.+ o       |

|o   o + S        |

|o..o o o         |

|.+. . o          |

|ooo  . .         |

|o..o.            |

+-----------------+

[root@proxy-nfs ~]# ssh-copy-id -i web01

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@web01‘s password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh ‘web01‘"

and check to make sure that only the key(s) you wanted were added.

[root@proxy-nfs ~]#

[root@proxy-nfs ~]# ssh-copy-id -i web02

The authenticity of host ‘web02 (192.168.152.136)‘ can‘t be established.

ECDSA key fingerprint is 4c:ee:a3:f1:5c:37:43:32:bd:06:4e:cc:3f:5a:0a:04.

Are you sure you want to continue connecting (yes/no)? yes

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@web02‘s password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh ‘web02‘"

and check to make sure that only the key(s) you wanted were added.

[root@proxy-nfs ~]# ssh-copy-id -i web03

The authenticity of host ‘web03 (192.168.152.137)‘ can‘t be established.

ECDSA key fingerprint is 4c:ee:a3:f1:5c:37:43:32:bd:06:4e:cc:3f:5a:0a:04.

Are you sure you want to continue connecting (yes/no)? yes

/usr/bin/ssh-copy-id: INFO: attempting to log in with the new key(s), to filter out any that are already installed

/usr/bin/ssh-copy-id: INFO: 1 key(s) remain to be installed -- if you are prompted now it is to install the new keys

root@web03‘s password:

Number of key(s) added: 1

Now try logging into the machine, with:   "ssh ‘web03‘"

and check to make sure that only the key(s) you wanted were added.

# 修改SSH端口

[root@proxy-nfs ~]# ssh web01

Last login: Tue Mar 21 15:08:30 2017 from proxy-nfs

[root@web01 ~]# sed -i s‘/^#Port 22/Port 8888/g‘ /etc/ssh/sshd_config

[root@web01 ~]# grep 8888 /etc/ssh/sshd_config

Port 8888

[root@web01 ~]# exit

logout

Connection to web01 closed.

[root@proxy-nfs ~]# ssh web02

Last login: Tue Mar 21 14:53:19 2017 from 192.168.152.1

[root@web02 ~]# sed -i s‘/^#Port 22/Port 8888/g‘ /etc/ssh/sshd_config

[root@web02 ~]# grep 8888 /etc/ssh/sshd_config

Port 8888

[root@web02 ~]# exit

logout

Connection to web02 closed.

[root@proxy-nfs ~]# ssh web03

Last login: Tue Mar 21 14:53:20 2017 from 192.168.152.1

[root@web03 ~]# sed -i s‘/^#Port 22/Port 8888/g‘ /etc/ssh/sshd_config

[root@web03 ~]# grep 8888 /etc/ssh/sshd_config

Port 8888

[root@web03 ~]# exit

logout

Connection to web03 closed.

[root@proxy-nfs ~]#

# SCP 远程拷贝文件

[root@proxy-nfs ~]# touch oldgirl.txt

[root@proxy-nfs ~]# scp oldgirl.txt web01:/tmp

oldgirl.txt                                                                                                                          100%    0     0.0KB/s   00:00   

[root@proxy-nfs ~]# scp web01:/etc/passwd .

passwd                                                                                                                               100% 2375     2.3KB/s   00:00