YNOTES笔记

#### 创建ssh用户 ```sh local-user abc password simple 123456 authorization-attribute user-role 10 undo authorization-attribute user-role network-operator authorization-attribute user-role network-admin service-type ssh ``` #### 开启ssh ```sh ssh server enable ``` #### 配置ssh ```sh user-interface vty 9 15 authentication-mode scheme user-role level-15 user-role network-admin protocol inbound ssh ``` #### 配置ip地址 ```sh interface vlan-interface 1 undo ip address #删除ip地址 ip address 172.16.14.254 255.255.255.0 #配置静态ip ``` #### 配置dhcp ```sh interface vlan-interface 1 ipaddress dhcp-alloc #管理VLAN接口通过DHCP方式获取IP地址 undoip address dhcp-alloc ``` #### 配置镜像端口 `g1/0/16的接口加入到镜像组，g1/0/3为监控口` ```sh mirroring-group 1 local mirroring-group 1 mirroring-port gigabitethernet 1/0/16 both mirroring-group 1 monitor-port gigabitethernet 1/0/3 display mirroring-group all ```

[下载frp](https://github.com/fatedier/frp) #### 服务端配置(有公网ip的服务器) frps.ini ```sh [common] bind_port = 10000 ``` 启动 ```sh /opt/frp/frps -c /opt/frp/frps.ini ``` #### 客户端配置 frpc.ini ```sh [common] server_addr = x.x.x.x server_port = 10000 [ssh] type = tcp local_ip = 127.0.0.1 #本地ip local_port = 8080 #本地服务端口 remote_port = 6060 #服务器提供转发的端口 ``` 启动 ```sh /opt/frp/frpc -c /opt/frp/frpc.ini ```

#### 安装rancher库 ```sh $ helm repo add rancher-stable https://releases.rancher.com/server-charts/stable $ helm search repo --versions|grep rancher $ helm fetch rancher-stable/rancher ``` #### 安装TLS证书 ```sh $ kubectl -n cattle-system create secret tls tls-rancher-ingress --cert=5024509__example.com.pem --key=5024509__example.com.key ``` #### 安装rancher ```sh $ helm install rancher rancher-stable/rancher --namespace cattle-system --set hostname=trancher.example.com --set replicas=3 --set ingress.tls.source=secret ``` #### 查看部署状态 ```sh $ kubectl -n cattle-system rollout status deploy/rancher ```