building solaris-based enterprise router-firewall project Post: 302324332

Sponsored Content

Operating Systems Solaris building solaris-based enterprise router-firewall project Post 302324332 by stdout on Wednesday 10th of June 2009 01:13:06 PM

06-10-2009

Registered User

building solaris-based router-firewall project

hi guys,

its been a while since my last visit here,
could not keep up the pace on this ever changing industry Smilie

i'd just doing my home research under vmware to make a solaris-based router-firewall using zones - doing a lot of reading about zones & review solaris zone functionality.

and now, i'm a bit stuck interpreting these ip-type=shared and ip-type=exclusive under the non-global zone. i mean, cant i just have that NIC belongs to a non-global zone without being plumbed under the global-zone?

i'm sorry for this long question, but i'll make it short - does anyone has done this before?

my scenario is :
a stripped down SXCE using 3-NICs - so that it will be a 3-legs firewall :
global-zone=LAN interface, NIC#1,
WAN, NIC#2
DMZ, NIC#3
and, i also like to have somekind of tunnel interface between zones - so that the traffic entering WAN from LAN doesnt have to go out from the NIC?

so, is there any possibilities to do this setup?

any constructive input would be very appreciated.

thank you.

-----Post Update-----

addition :

on my current setup - under the global zone, i have 3 NICs - and each one having subinterface for the non-global zone, so

lo0 127/8
lo0.1 WAN 127/8
lo0.2 DMZ 127/8
pcn0 global 192.168.10.1/24
pcn1.0 global 0/8
pcn1.1 WAN 10.0.0.1/24
pcn2.0 global 0/8
pcn2.1 DMZ 172.16.0.1/24

so, all this interface are ip shared.

what i mean is that : can i just have that pcn1 belongs to WAN, pcn2 to DMZ without using the global zone as host?

thanks Smilie

Last edited by stdout; 08-02-2009 at 03:44 AM..

stdout

View Public Profile for stdout

Find all posts by stdout

6 More Discussions You Might Find Interesting

1. IP Networking

Linux Router Project

Hi, I came across this forum looking for some help, Iam new to Unix/Linux and am need in help of some basic problems. I myself am a networker and know a bit about networking hardware and theory. If you have any questions i am available to assist. I am running a Caldera Box, with Kernel 2.2,...

2. UNIX for Dummies Questions & Answers

Building project using MAKE

Hi, I have a build script in perl to build projects in my team.It is using MakeMaker.I have a problem now.When I build a project and a tarball is created,I untar the tarball to get the files.Now the files have "rwx-r_x-r_x" permssions. While I want "rwx-rwx-rwx" for all files. i am not too sure...

3. Cybersecurity

Help needed in IPTables firewall/router setup - Linux

HI all, I have setup IPTables firewall/Router and my home network, with address space 192.168.10.XXX Form my private network hosts, i can ping the gateway ( 192.168.10.101 ) , but the reverse is not happening. Can someone help me as of what i need to do, so that i can ping my private...

4. UNIX and Linux Applications

Help with building firewall

Hi, I've installed firewall builder into my operating system (PCLinuxOS) from the repository. Now I need to configure and make run firewall builder in the main server (production server) of my company. The technique that I want to use is pushing the script from my laptop (where I've got the...

5. Programming

Building an operating system for senior project?

Hey guys! this is my first post on this site. I was hoping you guys could help me out. I am going to be a senior this year and I want to build an operating system from scratch or at least do as much of as I can by myself. I want to build nothing big like ubuntu but something smaller looking that...

6. Solaris

Solaris based project?

Hi friends, I am a Computer Science student, and about to do my final year project. I am a big lover of Solaris and SPARC RISC computers, and I want to work on those computers in future. I want to become a System Administrator/Security Administrator etc on the Solaris stuff. Could you please tell...

LEARN ABOUT OPENSOLARIS

net_zoneidtonetid

net_zoneidtonetid(9F)					   Kernel Functions for Drivers 				     net_zoneidtonetid(9F)

NAME

       net_zoneidtonetid - map a zoneid_t struture identifier to a netid_t structure

SYNOPSIS

       #include <sys/neti.h>

       netid_t net_zoneidtonetid(const zoneid_t zone);

INTERFACE LEVEL

       Solaris DDI specific (Solaris DDI).

PARAMETERS

       zone    valid zoneid_t structure that refers to a running zone.

DESCRIPTION

       The  net_zoneidtonetid()  function  maps  the  given zoneid_t structure (used to represent a zone that is currently running) into a netid_t
       structure that is associated with the IP instance supporting network functions for that zone.

RETURN VALUES

       The net_zoneidtonetid() function returns -1 if no mapping took place. Otherwise, it returns the netid_t structure  currently  used  by  the
       zoneid_t  structure.  For  zones  that  are  using a shared IP instance, the netid_t structure for the instance owned by the global zone is
       returned.

CONTEXT

       The net_zoneidtonetid() function may be called from user,  kernel, or interrupt context.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Availability		     |SUNWcsu			   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Committed 		   |
       +-----------------------------+-----------------------------+

SEE ALSO

       net_netidtozonid(9F), attributes(5)

SunOS 5.11							    1 May 2008						     net_zoneidtonetid(9F)