Shulou(Shulou.com)06/01 Report--

The / etc/hosts for both RAC servers is as follows

127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4

:: 1 localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.130.200 hdba hdba

192.168.130.201 hdbb hdbb hdbb

192.168.130.136 hdb-cluster-scan hdb-cluster-scan

192.168.130.137 hdba-vip hdba-vip

192.168.130.138 hdbb-vip hdbb-vip

192.168.148.200 hdba-priv hdba-priv

192.168.148.201 hdbb-priv hdbb-priv

192.168.130.208 hdg hdg

Ip information of An instance server

[root@hdba ~] # ifconfig

Eth0 Link encap:Ethernet HWaddr 5C:B9:01:99:3A:84

Inet addr:192.168.148.200 Bcast:192.168.148.255 Mask:255.255.255.0

Inet6 addr: fe80::5eb9:1ff:fe99:3a84/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:2783160300 errors:0 dropped:0 overruns:0 frame:0

TX packets:2925124606 errors:0 dropped:0 overruns:0 carrier:0

Collisions:0 txqueuelen:1000

RX bytes:2205601483366 (2.0 TiB) TX bytes:2420649621403 (2.2 TiB)

Eth0:1 Link encap:Ethernet HWaddr 5C:B9:01:99:3A:84

Inet addr:169.254.221.245 Bcast:169.254.255.255 Mask:255.255.0.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

Eth2 Link encap:Ethernet HWaddr 5C:B9:01:99:3A:85

Inet addr:192.168.130.200 Bcast:192.168.130.255 Mask:255.255.255.0

Inet6 addr: fe80::5eb9:1ff:fe99:3a85/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:7365390091 errors:0 dropped:0 overruns:0 frame:0

TX packets:8297092138 errors:0 dropped:0 overruns:0 carrier:0

Collisions:0 txqueuelen:1000

RX bytes:2046603688342 (1.8 TiB) TX bytes:6835745161060 (6.2 TiB)

Eth2:2 Link encap:Ethernet HWaddr 5C:B9:01:99:3A:85

Inet addr:192.168.130.137 Bcast:192.168.130.255 Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

Ip information of B instance server

[root@hdbb ~] # ifconfig

Eth0 Link encap:Ethernet HWaddr 5C:B9:01:99:38:24

Inet addr:192.168.148.201 Bcast:192.168.148.255 Mask:255.255.255.0

Inet6 addr: fe80::5eb9:1ff:fe99:3824/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:2925138277 errors:0 dropped:0 overruns:0 frame:0

TX packets:2783173132 errors:0 dropped:0 overruns:0 carrier:0

Collisions:0 txqueuelen:1000

RX bytes:2420675528287 (2.2 TiB) TX bytes:2205594234468 (2.0 TiB)

Eth0:1 Link encap:Ethernet HWaddr 5C:B9:01:99:38:24

Inet addr:169.254.205.69 Bcast:169.254.255.255 Mask:255.255.0.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

Eth2 Link encap:Ethernet HWaddr 5C:B9:01:99:38:25

Inet addr:192.168.130.201 Bcast:192.168.130.255 Mask:255.255.255.0

Inet6 addr: fe80::5eb9:1ff:fe99:3825/64 Scope:Link

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

RX packets:6957519128 errors:0 dropped:0 overruns:0 frame:0

TX packets:8365702494 errors:0 dropped:0 overruns:0 carrier:0

Collisions:0 txqueuelen:1000

RX bytes:2024616025362 (1.8 TiB) TX bytes:7204587376017 (6.5 TiB)

Eth2:1 Link encap:Ethernet HWaddr 5C:B9:01:99:38:25

Inet addr:192.168.130.138 Bcast:192.168.130.255 Mask:255.255.255.0

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1

The firewall configuration of both servers is the same, and the configuration file / etc/sysconfig/iptables is as follows

-An INPUT-p tcp-m state-- state NEW-m tcp-- dport 22-j ACCEPT

# all the data from the heartbeat network card are released

-An INPUT-I eth0-j ACCEPT

-An INPUT-I eth0:1-j ACCEPT

# vip and scan ip release

# the original vip of instance An accesses instance B and adds the vip of instance A to the firewall of instance B. in order to make the firewall configuration of the two servers the same, release the vip of both instance An and instance B

-An INPUT-I eth0-s 192.168.130.200Xue 32-j ACCEPT

-An INPUT-I eth0-s 192.168.130.201Unip 32-j ACCEPT

-An INPUT-I eth0-s 192.168.130.137 ACCEPT 32-j ACCEPT

-An INPUT-I eth0-s 192.168.130.138lap32-j ACCEPT

-An INPUT-I eth0-s 192.168.130.136 ACCEPT 32-j

-An INPUT-I eth0-s 192.168.200.11 ACCEPT 32-j ACCEPT

# Trust IP list. / 24 means the entire network segment is open, and / 32 means only this IP is open.

-An INPUT-s 10.10.23.0 take 24-p tcp-m state-- state NEW-m tcp-- dport 1521-j ACCEPT

-An INPUT-s 172.31.210.0 dport 24-p tcp-m state-- state NEW-m tcp-- dport 1521-j ACCEPT

-An INPUT-s 192.168.74.0 dport 24-p tcp-m state-- state NEW-m tcp-- dport 1521-j ACCEPT

-An INPUT-s 192.168.128.137 dport 32-p tcp-m state-- state NEW-m tcp-- dport 1521-j ACCEPT

# Open port 1521 for all network segments

-An INPUT-p tcp-- dport 1521-j ACCEPT

# the following two lines should be placed at the end. If you put them in front of them, the release will not take effect!

-An INPUT-j REJECT-- reject-with icmp-host-prohibited

-A FORWARD-j REJECT-- reject-with icmp-host-prohibited

COMMIT

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.