{"id":286,"date":"2021-12-05T22:20:07","date_gmt":"2021-12-05T13:20:07","guid":{"rendered":"https:\/\/hanakihomeserver.dip.jp\/blog\/?p=286"},"modified":"2021-12-05T22:23:18","modified_gmt":"2021-12-05T13:23:18","slug":"dhcp%e3%82%b5%e3%83%bc%e3%83%90%e6%a7%8b%e7%af%89","status":"publish","type":"post","link":"https:\/\/hanakihomeserver.com\/?p=286","title":{"rendered":"DHCP\u30b5\u30fc\u30d0\u69cb\u7bc9"},"content":{"rendered":"

\u901a\u5e38DHCP\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3059\u308b\u969b\u306f\u300cISC-DHCP\u300d\u3092\u4f7f\u3063\u3066\u69cb\u7bc9\u3059\u308b\u306e\u3060\u304c\u3001ISC\u304c\u65b0\u3057\u3044DHCP\u30b5\u30fc\u30d0\u300cKea\u300d\u3092\u51fa\u3057\u3066\u3044\u308b\u3053\u3068\u3092\u77e5\u3063\u305f\u306e\u3067\u305d\u3061\u3089\u3092\u4f7f\u3063\u3066\u69cb\u7bc9\u3059\u308b\u3053\u3068\u306b\u3057\u3066\u307f\u305f\u3002<\/font><\/p>\n

\u69cb\u7bc9\u624b\u9806\u306b\u3064\u3044\u3066\u306f\u4e0b\u8a18\u30b5\u30a4\u30c8\u3092\u53c2\u8003\u306b\u69cb\u7bc9\u3092\u884c\u3044\u307e\u3044\u3057\u305f\u3002
\u76ee\u6b21 | KeaKeeper | OSS\u3067\u306e\u30b7\u30b9\u30c6\u30e0\u69cb\u7bc9\u30fb\u30c7\u30fc\u30b8\u30fc\u30cd\u30c3\u30c8 (designet.co.jp)<\/a>
CentOS7 Kea-DHCP\u30b5\u30fc\u30d0\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb (unix-power.net)<\/a>

\u300cKea\u300d\u306f\u4eca\u307e\u3067\u306eDHCP\u30b5\u30fc\u30d0\u3068\u9055\u3044DB\u3067\u306e\u7ba1\u7406\u304c\u3067\u304d\u308b\u3002
\u69cb\u7bc9\u969b\u306fMySQL(MariaDB)\u3084PostgreSQL\u3092\u4f7f\u7528\u3057\u3066\u69cb\u7bc9\u304c\u3067\u304d\u308b\u304c\u3053\u3053\u3068\u3067\u306fMariaDB\u3092\u4f7f\u7528\u3057\u3066\u69cb\u7bc9\u3092\u884c\u3044\u307e\u3057\u305f\u3002<\/p>\n

<\/font><\/font><\/font><\/font><\/font><\/font><\/p>\n

\u69cb\u7bc9\u30d0\u30fc\u30b8\u30e7\u30f3\uff1aCentOS8 Kea 1.8
<\/font><\/font><\/font><\/font><\/font><\/font><\/p>\n


\n<\/font>
\n<\/font>
\n<\/font><\/p>\n\n\n\n
\n

# dnf install epel-release
\n# dnf install kea mariadb-server
# systemctl start \u2013now mariadb<\/font><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n


\n\u4e0b\u8a18\u8a2d\u5b9a\u306fMariaDB\u306e\u8a2d\u5b9a\u306b\u306a\u308a\u307e\u3059\u3002
<\/font>\u30fb\u7ba1\u7406\u8005\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u8a2d\u5b9a
\n\u30fb\u533f\u540d\u30e6\u30fc\u30b6\u306e\u524a\u9664
\n\u30fb\u7ba1\u7406\u8005\u30e6\u30fc\u30b6\u306e\u30ea\u30e2\u30fc\u30c8\u30ed\u30b0\u30a4\u30f3\u306e\u7981\u6b62
\n\u30fbtest\u30c7\u30fc\u30bf\u30d9\u30fc\u30b9\u306e\u524a\u9664
\n\u30fb\u6a29\u9650\u30c6\u30fc\u30d6\u30eb\u306e\u30ea\u30ed\u30fc\u30c9<\/p>\n

<\/font><\/font><\/p>\n\n\n\n
\n

# mysql_secure_installation<\/p>\n

NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
\nSERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!<\/p>\n

In order to log into MariaDB to secure it, we’ll need the current
\npassword for the root user. If you’ve just installed MariaDB, and
\nyou haven’t set the root password yet, the password will be blank,
\nso you should just press enter here.<\/p>\n

Enter current password for root (enter for none):
\nOK, successfully used password, moving on…<\/p>\n

Setting the root password ensures that nobody can log into the MariaDB
\nroot user without the proper authorisation.<\/p>\n

You already have a root password set, so you can safely answer ‘n’.<\/p>\n

Change the root password? [Y\/n] y
\nNew password:
\nRe-enter new password:
\nPassword updated successfully!
\nReloading privilege tables..
\n… Success!<\/p>\n

\nBy default, a MariaDB installation has an anonymous user, allowing anyone
\nto log into MariaDB without having to have a user account created for
\nthem. This is intended only for testing, and to make the installation
\ngo a bit smoother. You should remove them before moving into a
\nproduction environment.<\/p>\n

Remove anonymous users? [Y\/n] y
\n… Success!<\/p>\n

Normally, root should only be allowed to connect from ‘localhost’. This
\nensures that someone cannot guess at the root password from the network.<\/p>\n

Disallow root login remotely? [Y\/n] y
\n… Success!<\/p>\n

By default, MariaDB comes with a database named ‘test’ that anyone can
\naccess. This is also intended only for testing, and should be removed
\nbefore moving into a production environment.<\/p>\n

Remove test database and access to it? [Y\/n] y
\n– Dropping test database…
\n… Success!
\n– Removing privileges on test database…
\n… Success!<\/p>\n

Reloading the privilege tables will ensure that all changes made so far
\nwill take effect immediately.<\/p>\n

Reload privilege tables now? [Y\/n] y
\n… Success!<\/p>\n

Cleaning up…<\/p>\n

All done! If you’ve completed all of the above steps, your MariaDB
\ninstallation should now be secure.<\/p>\n

Thanks for using MariaDB!<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n


\n<\/font><\/font><\/p>\n

Kea\u306eDB\u3068\u30e6\u30fc\u30b6\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002
<\/font><\/p>\n

<\/p>\n\n\n\n
\n

# mysql -u root -p
\nEnter password:
\n> CREATE DATABASE kea;
\n> Exit<\/font><\/p>\n

# mysql -u root -p
\nEnter password:
\n> GRANT ALL ON kea.* TO
\nkeauser@localhost IDENTIFIED BY ‘password’;
\n> FLUSH PRIVILEGES;
\n> Exit<\/font><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\nKea\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002
\u30fb\u30ea\u30ea\u30fc\u30b9\u7528\u3068\u30db\u30b9\u30c8\u7528DB\u306e\u8a2d\u5b9a
\u30fbIP\u30a2\u30c9\u30ec\u30b9\u306e\u30ea\u30ea\u30fc\u30b9\u8a2d\u5b9a<\/p>\n\n\n\n
\n

# vim \/etc\/kea\/kea-dhcp4.conf
———————–\u7565———————–<\/p>\n

<\/font><\/p>\n

“hosts-databases”: [
   {
     “host”: “localhost”,
     “name”: “kea”,
     “password”: “password”,
     “port”: 3306,
     “type”: “mysql”,
     “user”: “keauser”
   }
\n],
\n“lease-database”: {
   “host”: “localhost”,
   “name”: “kea”,
   “password”: “password”,
   “port”: 3306,
   “type”: “mysql”,
   “user”: “keauser”
\n},
———————–\u7565————————-
“subnet4”: [
           {
             “option-data”: [
               {
                 \/\/\u30b2\u30fc\u30c8\u30a6\u30a7\u30a4\u306e\u8a2d\u5b9a
                 “name”: “routers”,
                 “data”: “192.168.10.1”,
                 “space”: “dhcp4”
               },
               {
                 \/\/DNS\u306e\u8a2d\u5b9a
                 “name”: “domain-name-servers”,
                 “data”: “192.168.11.3,192.168.211.11,8.8.8.8,8.8.4.4”,
                 “space”: “dhcp4”
               }
             ],
             “pools”: [
               {
                 \/\/IP\u30a2\u30c9\u30ec\u30b9\u306e\u30ea\u30ea\u30fc\u30b9\u7bc4\u56f2\u8a2d\u5b9a
                 “option-data”: [ ],
                 “pool”: “192.168.1.11-192.168.1.99”
               },
             ],
             \/\/IP\u30a2\u30c9\u30ec\u30b9\u306e\u30b5\u30d6\u30cd\u30c3\u30c8\u8a2d\u5b9a
             “subnet”: “192.168.10.0\/24”,
           }
         ],
———————-\u7565————————-<\/font><\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Kea\u306eDB\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
# kea-admin db-init mysql -u keauser -p password -n kea<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/font><\/p>\n

Kea\u3092\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n\n\n\n
# systemctl enable \u2013now kea-dhap4<\/font><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

<\/font><\/p>\n

Kea\u304c\u6b63\u5e38\u306b\u8d77\u52d5\u3067\u304d\u308c\u3070\u5b8c\u4e86\u3067\u3059<\/font><\/p>\n","protected":false},"excerpt":{"rendered":"

\u901a\u5e38DHCP\u30b5\u30fc\u30d0\u3092\u69cb\u7bc9\u3059\u308b\u969b\u306f\u300cISC-DHCP\u300d\u3092\u4f7f\u3063\u3066\u69cb\u7bc9\u3059\u308b\u306e\u3060\u304c\u3001IS … \u7d9a\u304d\u3092\u8aad\u3080 →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[41,42],"class_list":["post-286","post","type-post","status-publish","format-standard","hentry","category-2","tag-dhcp","tag-linux"],"_links":{"self":[{"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/posts\/286","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=286"}],"version-history":[{"count":2,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/posts\/286\/revisions"}],"predecessor-version":[{"id":288,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=\/wp\/v2\/posts\/286\/revisions\/288"}],"wp:attachment":[{"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=286"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=286"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hanakihomeserver.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=286"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}