hi guys,

its been a while since my last visit here,
could not keep up the pace on this ever changing industry

i'd just doing my home research under vmware to make a solaris-based router-firewall using zones - doing a lot of reading about zones & review solaris zone functionality.

and now, i'm a bit stuck interpreting these ip-type=shared and ip-type=exclusive under the non-global zone. i mean, cant i just have that NIC belongs to a non-global zone without being plumbed under the global-zone?

i'm sorry for this long question, but i'll make it short - does anyone has done this before?

my scenario is :
a stripped down SXCE using 3-NICs - so that it will be a 3-legs firewall :
global-zone=LAN interface, NIC#1,
WAN, NIC#2
DMZ, NIC#3
and, i also like to have somekind of tunnel interface between zones - so that the traffic entering WAN from LAN doesnt have to go out from the NIC?

so, is there any possibilities to do this setup?

any constructive input would be very appreciated.

thank you.

-----Post Update-----

addition :

on my current setup - under the global zone, i have 3 NICs - and each one having subinterface for the non-global zone, so

lo0 127/8
lo0.1 WAN 127/8
lo0.2 DMZ 127/8
pcn0 global 192.168.10.1/24
pcn1.0 global 0/8
pcn1.1 WAN 10.0.0.1/24
pcn2.0 global 0/8
pcn2.1 DMZ 172.16.0.1/24

so, all this interface are ip shared.

what i mean is that : can i just have that pcn1 belongs to WAN, pcn2 to DMZ without using the global zone as host?

thanks