DEVICE=eth0 或 eth1
ONBOOT=yes
BOOTPROTO=none
MASTER=bond0
SLAVE=yes
USERCTL=no

TYPE=Ethernet
DEVICE=bond0
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.1.100
NETMASK=255.255.255.0
GATEWAY=192.168.1.1
DNS1=8.8.8.8
BONDING_OPTS="miimon=100 mode=0 fail_over_mac=1"

nmcli connection add type bond ifname bond1 mode balance-rr

# 創(chuàng)建bond0
nmcli connection add type bond ifname bond0 mode active-backup
# 創(chuàng)建bond1
nmcli connection add type bond ifname bond1 mode balance-rr
# 創(chuàng)建bond2
nmcli connection add type bond ifname bond2 mode balance-xor
# 創(chuàng)建bond3
nmcli connection add type bond ifname bond3 mode broadcast
# 創(chuàng)建bond4
nmcli connection add type bond ifname bond4 mode 802.3ad
# 創(chuàng)建bond5
nmcli connection add type bond ifname bond5 mode balance-tlb
# 創(chuàng)建bond6
nmcli connection add type bond ifname bond6 mode balance-alb

nmcli connection modify bond-bond1 ipv4.addresses 192.168.10.81/24 ipv4.gateway 192.168.10.251 ipv4.method manual

nmcli connection modify bond-bond1 ipv4.method auto

nmcli connection add type bond-slave ifname ens224 master bond-bond1
nmcli connection add type bond-slave ifname ens256 master bond-bond1

nmcli connection reload
nmcli connection up bond-bond1
reboot

#!/usr/bin/env bash
set -euo pipefail

need_cmd() { command -v "$1" >/dev/null 2>&1 || { echo "缺少命令: $1"; exit 1; }; }
need_cmd nmcli
need_cmd ip

echo "===  Bond 自動化配置腳本 ==="

# 讀取可用物理網(wǎng)卡（排除 lo、bond、vlan、bridge、tun、docker 等）
mapfile -t IFACES < <(
  nmcli -t -f DEVICE,TYPE device status |
  awk -F: '
    $2=="ethernet" || $2=="infiniband" {
      dev=$1;
      if (dev!="lo" && dev!~/(^bond|^br|^virbr|^docker|^veth|^tun|^tap|^wg|^sit|^gre|^vlan)/) print dev
    }'
)

if (( ${#IFACES[@]} < 2 )); then
  echo "可用物理網(wǎng)卡少于 2 塊，無法創(chuàng)建 bond。"
  nmcli device status
  exit 1
fi

echo
echo "發(fā)現(xiàn)可用網(wǎng)卡："
for i in "${!IFACES[@]}"; do
  dev="${IFACES[$i]}"
  state="$(nmcli -t -f DEVICE,STATE device status | awk -F: -v d="$dev" '$1==d{print $2}')"
  mac="$(nmcli -t -f GENERAL.HWADDR device show "$dev" 2>/dev/null | cut -d: -f2- || true)"
  ip4="$(ip -4 -o addr show "$dev" 2>/dev/null | awk '{print $4}' | head -n1 || true)"
  printf "  [%d] %-12s  state=%-12s  ip=%-18s  mac=%s\n" "$i" "$dev" "$state" "${ip4:-none}" "${mac:-unknown}"
done

echo
read -rp "請輸入 bond 名稱(默認 bond0): " BOND_NAME
BOND_NAME="${BOND_NAME:-bond0}"

echo
echo "請選擇 bond mode："
echo "  1) balance-rr   (輪詢，需交換機支持/容忍亂序)"
echo "  2) active-backup(主備，最穩(wěn)，無需交換機特殊配置)"
echo "  3) balance-xor  (基于 hash 分流，部分場景需配合交換機)"
echo "  4) broadcast"
echo "  5) 802.3ad      (LACP，推薦生產(chǎn)；交換機需做鏈路聚合)"
echo "  6) balance-tlb"
echo "  7) balance-alb"
read -rp "輸入序號(默認 2): " MODE_NO
MODE_NO="${MODE_NO:-2}"

case "$MODE_NO" in
  1) BOND_MODE="balance-rr" ;;
  2) BOND_MODE="active-backup" ;;
  3) BOND_MODE="balance-xor" ;;
  4) BOND_MODE="broadcast" ;;
  5) BOND_MODE="802.3ad" ;;
  6) BOND_MODE="balance-tlb" ;;
  7) BOND_MODE="balance-alb" ;;
  *) echo "無效選擇"; exit 1 ;;
esac

echo
read -rp "請輸入 IPv4 地址(如 192.168.100.1): " IPADDR
read -rp "請輸入 CIDR 前綴(如 24): " PREFIX
ADDR_CIDR="${IPADDR}/${PREFIX}"

read -rp "是否配置網(wǎng)關(guān)? (y/N): " GW_YN
GW_YN="${GW_YN:-N}"
GATEWAY=""
if [[ "$GW_YN" =~ ^[Yy]$ ]]; then
  read -rp "請輸入網(wǎng)關(guān)(如 192.168.100.254): " GATEWAY
fi

read -rp "是否配置 DNS? (y/N): " DNS_YN
DNS_YN="${DNS_YN:-N}"
DNS_SERVERS=""
if [[ "$DNS_YN" =~ ^[Yy]$ ]]; then
  read -rp "請輸入 DNS(可多個，用逗號分隔，如 223.5.5.5,8.8.8.8): " DNS_SERVERS
fi

echo
echo "請選擇兩塊(或多塊)網(wǎng)卡作為 slave（輸入序號，用空格分隔，例如：0 1）："
read -rp "slave 序號: " -a IDX

if (( ${#IDX[@]} < 2 )); then
  echo "至少選擇 2 塊網(wǎng)卡。"
  exit 1
fi

SLAVES=()
for id in "${IDX[@]}"; do
  [[ "$id" =~ ^[0-9]+$ ]] || { echo "序號非法: $id"; exit 1; }
  (( id < ${#IFACES[@]} )) || { echo "越界序號: $id"; exit 1; }
  SLAVES+=("${IFACES[$id]}")
done

# 檢查重復
uniq_count="$(printf "%s\n" "${SLAVES[@]}" | sort -u | wc -l)"
if (( uniq_count != ${#SLAVES[@]} )); then
  echo "檢測到重復網(wǎng)卡選擇，請重新運行腳本。"
  exit 1
fi

echo
echo "=== 你將創(chuàng)建如下配置 ==="
echo "bond:   $BOND_NAME"
echo "mode:   $BOND_MODE"
echo "addr:   $ADDR_CIDR"
echo "gw:     ${GATEWAY:-<none>}"
echo "dns:    ${DNS_SERVERS:-<none>}"
echo "slaves: ${SLAVES[*]}"
echo

read -rp "確認執(zhí)行? (y/N): " OK
OK="${OK:-N}"
if [[ ! "$OK" =~ ^[Yy]$ ]]; then
  echo "已取消。"
  exit 0
fi

echo
echo ">>> 開始配置..."

# 如果已有同名連接，先提示并刪除（更可控）
if nmcli -t -f NAME connection show | grep -qx "$BOND_NAME"; then
  echo "檢測到已存在連接 $BOND_NAME，將刪除后重建。"
  nmcli connection delete "$BOND_NAME" || true
fi

# 刪除舊的 slave 連接（只刪我們腳本命名過的）
for dev in "${SLAVES[@]}"; do
  nmcli -t -f NAME connection show | grep -E "^${BOND_NAME}-slave-${dev}$" | while IFS= read -r con; do
        nmcli connection delete "$con" || true
      done || true
done


# 創(chuàng)建 bond
nmcli connection add con-name "$BOND_NAME" type bond ifname "$BOND_NAME" mode "$BOND_MODE" >/dev/null

# 配置 IPv4
nmcli connection modify "$BOND_NAME" ipv4.method manual ipv4.addresses "$ADDR_CIDR"

if [[ -n "$GATEWAY" ]]; then
  nmcli connection modify "$BOND_NAME" ipv4.gateway "$GATEWAY"
else
  nmcli connection modify "$BOND_NAME" ipv4.gateway ""
fi

if [[ -n "$DNS_SERVERS" ]]; then
  # nmcli 支持用空格或逗號，統(tǒng)一轉(zhuǎn)空格
  DNS_SERVERS="${DNS_SERVERS//,/ }"
  nmcli connection modify "$BOND_NAME" ipv4.dns "$DNS_SERVERS"
fi

# 建議：bond 承載主 IP，物理口不配 IP
for dev in "${SLAVES[@]}"; do
  slave_con="${BOND_NAME}-slave-${dev}"
  nmcli connection add type bond-slave con-name "$slave_con" ifname "$dev" master "$BOND_NAME" >/dev/null
done

# 啟用連接（先 bond 再 slave）
nmcli connection up "$BOND_NAME" >/dev/null || true
for dev in "${SLAVES[@]}"; do
  nmcli connection up "${BOND_NAME}-slave-${dev}" >/dev/null || true
done

echo
echo ">>> 完成。當前設(shè)備狀態(tài)："
nmcli device status
echo
echo ">>> Bond 鏈路概覽："
ip -d link show "$BOND_NAME" || true
echo
echo ">>> IPv4 地址："
ip -4 addr show "$BOND_NAME" || true

echo
echo "提示：如果你選的是 802.3ad (LACP)，交換機側(cè)必須配置對應端口的鏈路聚合（同一聚合組）。"