ISCSI
     共享快设备
     fc-san
          需要光钎交换机才能使用[fc - 光钎]
     ip-san
          tcp/ip  具有独立计算功能
软件形式:
     toe
硬件形式:
     HBA的存储卡
服务端
先分一个快设备出来用于共享
partprobe /dev/sdb1
贡献度是没有文件系统的裸设备
yum install targetcli     #toe
systemctl enable target   #开机自启
targetcli
[[email protected] ~]# targetcli
Warning: Could not load preferences file /root/.targetcli/prefs.bin.
targetcli shell version 2.1.fb34
Copyright 2011-2013 by Datera, Inc and others.
For help on commands, type 'help'.
/> ls
o- / ................................................................................ [...]
  o- backstores ..................................................................... [...]
  | o- block ......................................................... [Storage Objects: 0]
  | o- fileio ........................................................ [Storage Objects: 0]
  | o- pscsi ......................................................... [Storage Objects: 0]
  | o- ramdisk ....................................................... [Storage Objects: 0]
  o- iscsi ................................................................... [Targets: 0]
  o- loopback ................................................................ [Targets: 0]
/backstores> block/ create joinlabs /dev/sdb1
Created block storage object joinlabs using /dev/sdb1.
cd iscsi
/iscsi> create iqn.2017-08.com.example:192.168.0.22
Created target iqn.2017-08.com.example:192.168.0.22.
Created TPG 1.
/iscsi> cd iqn.2017-08.com.example:192.168.0.22/
/iscsi/iqn.20...:192.168.0.22> ls
o- iqn.2017-08.com.example:192.168.0.22 ......................................... [TPGs: 1]
  o- tpg1 .......................................................... [no-gen-acls, no-auth]
    o- acls ..................................................................... [ACLs: 0]
    o- luns ..................................................................... [LUNs: 0]
    o- portals ............................................................... [Portals: 0]
/iscsi/iqn.20...:192.168.0.22> cd tpg1/
/iscsi/iqn.20...168.0.22/tpg1> ls
o- tpg1 ............................................................ [no-gen-acls, no-auth]
  o- acls ....................................................................... [ACLs: 0]
  o- luns ....................................................................... [LUNs: 0]
  o- portals ................................................................. [Portals: 0]
/iscsi/iqn.20...168.0.22/tpg1> acls/ create iqn.2017-08.com.example:server
Created Node ACL for iqn.2017-08.com.example:server
/iscsi/iqn.20...168.0.22/tpg1> ls
o- tpg1 ............................................................ [no-gen-acls, no-auth]
  o- acls ....................................................................... [ACLs: 1]
  | o- iqn.2017-08.com.example:server .................................... [Mapped LUNs: 0]
  o- luns ....................................................................... [LUNs: 0]
  o- portals ................................................................. [Portals: 0
#映射luns设备
/iscsi/iqn.20...168.0.22/tpg1> portals/ create 192.168.0.22
Using default IP port 3260
Created network portal 192.168.0.22:3260.
/iscsi/iqn.20...168.0.22/tpg1> ls
o- tpg1 ............................................................ [no-gen-acls, no-auth]
  o- acls ....................................................................... [ACLs: 1]
  | o- iqn.2017-08.com.example:server .................................... [Mapped LUNs: 0]
  o- luns ....................................................................... [LUNs: 0]
  o- portals ................................................................. [Portals: 1]
    o- 192.168.0.22:3260 ............................................................. [OK
#设置端口

#create可以使用delte删除,接口需要3260删除


/iscsi/iqn.20...168.0.22/tpg1> set attribute demo_mode_write_protect=0
Parameter demo_mode_write_protect is now '0'.
#关闭样板机写功能
/iscsi/iqn.20...168.0.22/tpg1> set attribute authentication=0
Parameter authentication is now '0'.
#关闭认证
/iscsi/iqn.20...168.0.22/tpg1> set attribute generate_node_acls=1
Parameter generate_node_acls is now '1'.
#把节点打开
上面三步必须的,没有就会出问题
#退出,他会自动保存你的设置
/iscsi/iqn.20...168.0.22/tpg1> exit
Global pref auto_save_on_exit=true
Last 10 configs saved in /etc/target/backup.
Configuration saved to /etc/target/saveconfig.json

#防火墙通过iscsi的端口3260
firewall-cmd --add-port=3260/tcp --permanent
客户端
yum install iscsiadm -y
iscsiadm -m discoverry -t sendtargets{st也可以} -p 192.168.0.19
[[email protected] ~]# iscsiadm -m discovery -t st -p 192.168.0.22
192.168.0.22:3260,1 iqn.2017-08.com.example:192.168.0.22

[[email protected] ~]# iscsiadm -m discovery -t st -p 192.168.0.22 -l
192.168.0.22:3260,1 iqn.2017-08.com.example:192.168.0.22
Logging in to [iface: default, target: iqn.2017-08.com.example:192.168.0.22, portal: 192.168.0.22,3260] (multiple)
Login to [iface: default, target: iqn.2017-08.com.example:192.168.0.22, portal: 192.168.0.22,3260] successful.
登录
NAME          MAJ:MIN RM  SIZE RO TYPE MOUNTPOINT
fd0             2:0    1    4K  0 disk
sda             8:0    0  100G  0 disk
├─sda1          8:1    0  512M  0 part /boot
└─sda2          8:2    0 13.8G  0 part
  ├─rhel-root 253:0    0   10G  0 lvm  /
  ├─rhel-swap 253:1    0    1G  0 lvm  [SWAP]
  └─rhel-home 253:2    0  512M  0 lvm  /home
sdb             8:16   0    1G  0 disk
sr0            11:0    1 1024M  0 rom
 
然后成功获取到共享的磁盘
断开iscsi
例子在man中有

可以用在集群中,使用共享的iscsi盘来实现网页内容同步,注意这里的挂载需要用UUID号,盘号在这里极其不稳定
红帽7为_netdev ,系统会认为是一个网络设备使用必须添加(先启动网络再启动这个)

win客户端
可以看到共享成功
防火墙:(firewalld
     firewalld-cmd --state          #查看防火墙状态
     firewalld 有9个区域
获取默认区域和设置默认区域
[[email protected] ~]# firewall-cmd --get-zones
block dmz drop external home internal public trusted work
dmz  隔离区域
drop 丢弃
external 外网
home 内网
public 公共的
查看你的接口属于哪一个区域,接口区域在哪个区域,哪个区域就是启用的
改变接口在哪一个区域
只能查看默认区域
查看所有区域
查看特定区域
添加服务到新区域
防火墙副规则
[[email protected] ~]# firewall-cmd --add-rich-rule 'rule family="ipv4" source address="192.168.0.22" port port="3260" protocol="tcp" accept' --permanent
允许访问21号机来访问我的3260端口 
删除副规则
remove
防火墙的图形化
firewall-config

 视频分享

链接: https://pan.baidu.com/s/1c2TtIQO 密码: e3jz