【linux】ip命令

1. 介绍

man page: show / manipulate routing, devices, policy routing and tunnels

格式:

ip [ OPTIONS ] OBJECT { COMMAND | help }

2. 查看网络接口信息

命令格式:

ip a # 或者 ip addr
ip -4 a # Only show TCP/IP IPv4
ip -6 a # Only show TCP/IP IPv6

#following only show etho info
ip a show eth0 
ip a list eth0
ip a show dev eth0

ip link ls up # Only show runing interfaces

示例:

[jiangjian@localhost shell]$ ip a #或者 ip addr
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:17:4a:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.119.90/24 brd 192.168.119.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::f1fb:43f:7ada:57a4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
[jiangjian@localhost shell]$ 

3. 接口配置ip

命令格式：
ip a add {ip_addr/mask} dev {interface}

示例:

[jiangjian@localhost shell]$ sudo ip a add 192.168.119.92/24 dev ens33
[sudo] password for jiangjian: 
Sorry, try again.
[sudo] password for jiangjian: 
Sorry, try again.
[sudo] password for jiangjian: 
[jiangjian@localhost shell]$ ls
1.txt      demo.html         for.sh             trap.sh
a.txt      do.sh             if.sh              until.sh
b.txt      echoArguments.sh  input-password.sh  while.sh
case.sh    expr              myapp.data
change.sh  finduser.sh       normal.sh
[jiangjian@localhost shell]$ 
[jiangjian@localhost shell]$ ip addr show ens33
2: ens33:  mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:17:4a:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.119.90/24 brd 192.168.119.255 scope global noprefixroute ens33
       valid_lft forever preferred_lft forever
    inet 192.168.119.92/24 scope global secondary ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::f1fb:43f:7ada:57a4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever

4. 删除接口的ip配置

命令格式:ip a del {ipv6_addr_OR_ipv4_addr} dev {interface}

示例:

[jiangjian@localhost shell]$ sudo ip a del 192.168.119.92/24 dev ens33

5. 刷新接口的ip地址

命令格式:ip -s -s a f to {ip_addr/mask}

6. 设置接口开启或关闭

命令格式:ip link set dev {DEVICE} {up|down}

示例

[root@localhost ~]# ip link set dev ens33 down
# xshell中断了，网络没了.....

7. 设置txnqueuelen

命令格式:ip link set txqueuelen {NUMBER} dev {DEVICE}
示例:

[root@localhost ~]# ip link set txqueuelen 1600 dev ens33
[root@localhost ~]# ip a | grep 1600
2: ens33:  mtu 1500 qdisc pfifo_fast state UP group default qlen 1600

8. 设置设备MTU

命令格式:ip link set mtu {NUMBER} dev {DEVICE}

示例:

[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33:  mtu 1500 qdisc pfifo_fast state UP group default qlen 1600
    link/ether 00:0c:29:17:4a:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.119.90/24 scope global ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::f1fb:43f:7ada:57a4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
[root@localhost ~]# ip link set mtu 2000 dev ens33
[root@localhost ~]# ip a
1: lo:  mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: ens33:  mtu 2000 qdisc pfifo_fast state UP group default qlen 1600
    link/ether 00:0c:29:17:4a:8d brd ff:ff:ff:ff:ff:ff
    inet 192.168.119.90/24 scope global ens33
       valid_lft forever preferred_lft forever
    inet6 fe80::f1fb:43f:7ada:57a4/64 scope link noprefixroute 
       valid_lft forever preferred_lft forever
3: virbr0:  mtu 1500 qdisc noqueue state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
    inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
       valid_lft forever preferred_lft forever
4: virbr0-nic:  mtu 1500 qdisc pfifo_fast master virbr0 state DOWN group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
[root@localhost ~]# 

9. 显示邻居或者arp缓存

命令格式: ip n show 或 ip neigh show
示例:

[root@localhost ~]# ip n show
192.168.119.1 dev ens33 lladdr 00:50:56:c0:00:08 DELAY
[root@localhost ~]# 

后面DELAY的定义等如下:

1. STALE – The neighbour is valid, but is probably already unreachable, so the kernel will try to check it at the first transmission.
2. DELAY – A packet has been sent to the stale neighbour and the kernel is waiting for confirmation.
3. REACHABLE – The neighbour is valid and apparently reachable.

10. 删除arp项

命令格式:ip neigh del {IPAddress} dev {DEVICE}
示例:

[root@localhost ~]# ip neigh del 192.168.119.1 dev ens33

11. 刷新arp

命令格式:ip -s -s n f {IPADDRESS}

12. 查看路由信息

命令格式:

ip r
ip r list
ip route list
ip route

13.新增路由项

命令格式:

p route add {NETWORK/MASK} via {GATEWAYIP}
ip route add {NETWORK/MASK} dev {DEVICE}
ip route add default {NETWORK/MASK} dev {DEVICE}
ip route add default {NETWORK/MASK} via {GATEWAYIP}

示例:

[root@localhost Music]# ip route add 192.168.1.0/24 dev ens33
[root@localhost Music]# 

14. 删除路由项

命令格式:

ip route del default  # 删除默认网关
ip route del {NETWORK/MASK} dev {DEVICE}

15. 改变mac地址

命令格式:
ip link set dev {DEVICE} address XX:YY:ZZ

示例:

[root@localhost Music]# NIC="virbr0"
[root@localhost Music]# ip link show $NIC
3: virbr0:  mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default qlen 1000
    link/ether 52:54:00:ac:bd:ce brd ff:ff:ff:ff:ff:ff
[root@localhost Music]# ip link set dev $NIC down
[root@localhost Music]# ip link set dev $NIC address XX:YY:ZZ:AA:BB:CC
"XX" is invalid lladdr.
[root@localhost Music]# ip link set dev $NIC address 10:10:10:10:10:10
[root@localhost Music]# ip link set dev $NIC
[root@localhost Music]# ip link show $NIC
3: virbr0:  mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default qlen 1000
    link/ether 10:10:10:10:10:10 brd ff:ff:ff:ff:ff:ff
[root@localhost Music]#