ISCSI 共享快设备 fc-san 需要光钎交换机才能使用[fc - 光钎] ip-san tcp/ip 具有独立计算功能软件形式： toe硬件形式： HBA的存储卡
服务端先分一个快设备出来用于共享partprobe /dev/sdb1贡献度是没有文件系统的裸设备yum install targetcli #toesystemctl enable target #开机自启targetcli[root@desktop22 ~]# targetcliWarning: Could not load preferences file /root/.targetcli/prefs.bin.targetcli shell version 2.1.fb34Copyright 2011-2013 by Datera, Inc and others.For help on commands, type ‘help’.
/> lso- / …………………………………………………………………….. […] o- backstores …………………………………………………………… […] | o- block ………………………………………………… [Storage Objects: 0] | o- fileio ……………………………………………….. [Storage Objects: 0] | o- pscsi ………………………………………………… [Storage Objects: 0] | o- ramdisk ………………………………………………. [Storage Objects: 0] o- iscsi …………………………………………………………. [Targets: 0] o- loopback ………………………………………………………. [Targets: 0]/backstores> block/ create joinlabs /dev/sdb1Created block storage object joinlabs using /dev/sdb1.cd iscsi/iscsi> create iqn.2017-08.com.example:192.168.0.22Created target iqn.2017-08.com.example:192.168.0.22.Created TPG 1./iscsi> cd iqn.2017-08.com.example:192.168.0.22//iscsi/iqn.20…:192.168.0.22> lso- iqn.2017-08.com.example:192.168.0.22 ………………………………….. [TPGs: 1] o- tpg1 …………………………………………………. [no-gen-acls, no-auth] o- acls …………………………………………………………… [ACLs: 0] o- luns …………………………………………………………… [LUNs: 0] o- portals ……………………………………………………… [Portals: 0]/iscsi/iqn.20…:192.168.0.22> cd tpg1//iscsi/iqn.20…168.0.22/tpg1> lso- tpg1 …………………………………………………… [no-gen-acls, no-auth] o- acls …………………………………………………………….. [ACLs: 0] o- luns …………………………………………………………….. [LUNs: 0] o- portals ……………………………………………………….. [Portals: 0]/iscsi/iqn.20…168.0.22/tpg1> acls/ create iqn.2017-08.com.example:serverCreated Node ACL for iqn.2017-08.com.example:server/iscsi/iqn.20…168.0.22/tpg1> lso- tpg1 …………………………………………………… [no-gen-acls, no-auth] o- acls …………………………………………………………….. [ACLs: 1] | o- iqn.2017-08.com.example:server ……………………………… [Mapped LUNs: 0] o- luns …………………………………………………………….. [LUNs: 0] o- portals ……………………………………………………….. [Portals: 0**#映射luns设备**/iscsi/iqn.20…168.0.22/tpg1> portals/ create 192.168.0.22Using default IP port 3260Created network portal 192.168.0.22:3260./iscsi/iqn.20…168.0.22/tpg1> lso- tpg1 …………………………………………………… [no-gen-acls, no-auth] o- acls …………………………………………………………….. [ACLs: 1] | o- iqn.2017-08.com.example:server ……………………………… [Mapped LUNs: 0] o- luns …………………………………………………………….. [LUNs: 0] o- portals ……………………………………………………….. [Portals: 1] o- 192.168.0.22:3260 ……………………………………………………. [OK**#设置端口******
#create可以使用delte删除，接口需要3260删除**********/iscsi/iqn.20…168.0.22/tpg1> set attribute demo_mode_write_protect=0Parameter demo_mode_write_protect is now ‘0’.#关闭样板机写功能**/iscsi/iqn.20…168.0.22/tpg1> set attribute authentication=0Parameter authentication is now ‘0’.#关闭认证/iscsi/iqn.20…168.0.22/tpg1> set attribute generate_node_acls=1Parameter generate_node_acls is now ‘1’.#把节点打开
上面三步必须的，没有就会出问题**#退出，他会自动保存你的设置**/iscsi/iqn.20…168.0.22/tpg1> exitGlobal pref auto_save_on_exit=trueLast 10 configs saved in /etc/target/backup.Configuration saved to /etc/target/saveconfig.json
#防火墙通过iscsi的端口3260firewall-cmd –add-port=3260/tcp –permanent客户端yum install iscsiadm -yiscsiadm -m discoverry -t sendtargets{st也可以} -p 192.168.0.19[root@desktop43 ~]# iscsiadm -m discovery -t st -p 192.168.0.22192.168.0.22:3260,1 iqn.2017-08.com.example:192.168.0.22
[root@desktop43 ~]# iscsiadm -m discovery -t st -p 192.168.0.22 -l192.168.0.22:3260,1 iqn.2017-08.com.example:192.168.0.22Logging in to [iface: default, target: iqn.2017-08.com.example:192.168.0.22, portal: 192.168.0.22,3260] (multiple)Login to [iface: default, target: iqn.2017-08.com.example:192.168.0.22, portal: 192.168.0.22,3260] successful.登录[root@desktop43 ~]# lsblkNAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTfd0 2:0 1 4K 0 disksda 8:0 0 100G 0 disk├─sda1 8:1 0 512M 0 part /boot└─sda2 8:2 0 13.8G 0 part ├─rhel-root 253:0 0 10G 0 lvm / ├─rhel-swap 253:1 0 1G 0 lvm [SWAP] └─rhel-home 253:2 0 512M 0 lvm /homesdb 8:16 0 1G 0 disksr0 11:0 1 1024M 0 rom然后成功获取到共享的磁盘****断开iscsi例子在man中有
可以用在集群中，使用共享的iscsi盘来实现网页内容同步，注意这里的挂载需要用UUID号，盘号在这里极其不稳定红帽7为_netdev ,系统会认为是一个网络设备使用必须添加（先启动网络再启动这个）
win客户端可以看到共享成功
防火墙：（firewalld） firewalld-cmd –state #查看防火墙状态 firewalld 有9个区域获取默认区域和设置默认区域
[root@desktop22 ~]# firewall-cmd –get-zonesblock dmz drop external home internal public trusted workdmz 隔离区域drop 丢弃external 外网home 内网public 公共的
查看你的接口属于哪一个区域，接口区域在哪个区域，哪个区域就是启用的
改变接口在哪一个区域只能查看默认区域查看所有区域
查看特定区域添加服务到新区域
防火墙副规则[root@desktop22 ~]# firewall-cmd –add-rich-rule ‘rule family=“ipv4” source address=“192.168.0.22” port port=“3260” protocol=“tcp” accept’ –permanent允许访问21号机来访问我的3260端口
删除副规则remove
防火墙的图形化
firewall-config
视频分享
链接: https://pan.baidu.com/s/1c2TtIQO 密码: e3jz