作者：朱明宇
名称：开放所有正处于监听状态的端口策略
作用：开放所有正处于监听状态的端口策略
使用方法：
1. 给此脚本添加执行权限
2. 执行此脚本
#!/bin/bash
systemctl start firewalld
systemctl enable firewalld
for k in `ss -ntulap |grep 0.0.0.0 | grep LISTEN | awk '{print $5}' | awk -F':' '{print $2}'`
do
firewall-cmd --add-port=$k/tcp --permanent
done
firewall-cmd --reload作者：朱明宇
名称：批量对多个 IP 地址开发多个端口策略
作用：批量对多个 IP 地址开发多个端口策略
使用方法：
1. 在此脚本的分割线内写入相应的内容
2. 给此脚本添加执行权限
3. 执行此脚本
脚本分割线里的变量：
1.ips=”192.168.2.1 192.168.1.0/24″ #要开放端口的 IP 地址
2.ports”22 3306 8080-8090″ #要开放的端口
#!/bin/bash
####################### Separator ########################
ips="192.168.2.1 192.168.1.0/24"
ports"22 3306 8080-8090"
####################### Separator ########################
systemctl start firewalld
systemctl enable firewalld
for i in $ips
do
for j in $ports
do
firewall-cmd --add-rich-rule="rule family="ipv4" source address="$i" port protocol="tcp" port="$j" accept" --permanent
done
echo $i done
echo
done
firewall-cmd --reload# nmcli network on或者：
# nmcli net on# nmcli network off或者：
# nmcli net off# nmcli connection show或者：
# nmcli conneciton或者：
# nmcli con show或者：
# nmcli con# nmcli connection show --active或者：
# nmcli conneciton --active或者：
# nmcli con show --active或者：
# nmcli con --active# nmcli device connect <network device name>或者：
# nmcli dev con <network device name># nmcli device status或者：
# nmcli dev status# nmcli connection add con-name <custom network card alias> ifname <network device name> type ethernet（补充：这里 con-name 是指要指定一个自定义的网卡别名，ifname 是指要指明网络设备名）
或者：
# nmcli con add con-name <custom network card alias> ifname <network device name> type ethernet（补充：这里 con-name 是指要指定一个自定义的网卡别名，ifname 是指要指明网络设备名）
# nmcli connection delete <custom network card alias>或者：
# nmcli con del <custom network card alias># nmcli device connect <network device name>或者：
# nmcli dev con <network device name># nmcli device disconnect <network device name>或者：
# nmcli dev dis <network device name># nmcli connection modify <custom network card alias> ipv4.address <IP address>/<subnet mask> ipv4.gateway <gateway IP address> ipv4.dns <DNS IP address> autoconnect yes# nmcli connection modify eth0 ipv4.address 192.168.1.1/24 ipv4.gateway 192.168.1.1 ipv4.dns 192.168.1.254 autoconnect yes（补充：这里以添加给 eth0 添加 IP 地址 192.168.1.1/24，网关 192.168.1.1，DNS 192.168.1.254 为例）
# nmcli connection up <custom network card alias># nmcli connection down eth0# nmcli con mod <custom network card alias> ipv4.routes "<network segment> <gateway IP address>"# nmcli con mod eth0 ipv4.routes "192.168.2.0/24 192.168.3.1"（补充：这里以给 eth0 网卡添加 192.168.2.0/24 通过 192.168.3.1 的网关为例）
# nmcli connection up <custom network card alias># nmcli connection up eth0（补充：这里以让 eth0 生效为例）
# nmcli connection show# nmcli connection add type team con-name <connection name of network card binding group> ifname <name of network card binding group> config ‘{“runner”:{“name”:”activebackup”}}’# nmcli connection add type team con-name team0 ifname team0 config ‘{“runner”:{“name”:”activebackup”}}’# nmcli connection add type team-slave con-name <network card connection name> ifname <subnet card name> master <name of network card binding group># nmcli con add type team-slave con-name team0-port0 ifname eth0 master team0
# nmcli con add type team-slave con-name team0-port1 ifname eth1 master team0# nmcli connection modify team0 ipv4.addresses 192.168.100.5/24 ipv4.gateway 192.168.100.1 ipv4.method manual autoconnect yes# nmcli connection show# nmcli connection up <subnet card name># nmcli connection up team0-port0
# nmcli connection up team0-port1或者：
# nmcli connection reload# nmcli connection up <name of network card binding group># nmcli connection up team0# teamdctl team1 status# ip address show （补充：如果网卡组里出现了我们配置的 IP 地址，则代表 IP 地址配置成功）
# ethtool ens192
Settings for ens192:
Supported ports: [ TP ]
Supported link modes: 1000baseT/Full
10000baseT/Full
Supported pause frame use: No
Supports auto-negotiation: No
Supported FEC modes: Not reported
Advertised link modes: Not reported
Advertised pause frame use: No
Advertised auto-negotiation: No
Advertised FEC modes: Not reported
Speed: 10000Mb/s
Duplex: Full
Port: Twisted Pair
PHYAD: 0
Transceiver: internal
Auto-negotiation: off
MDI-X: Unknown
Supports Wake-on: uag
Wake-on: d
Link detected: yes（补充：由上面的输出结果可以得知 ens192 网卡目前工作在 1000baseT/Full 状态）
# lspci -vvv | grep Ethernet
0b:00.0 Ethernet controller: VMware VMXNET3 Ethernet Controller (rev 01)
Subsystem: VMware VMXNET3 Ethernet Controller（补充：由上面的输出结果可以得知，网卡设备为 VMware VMXNET3 Ethernet Controller (rev 01) ，我们可以在网上搜索此设备名以得知此网卡的速率）