Solaris

Hi

We took the reboot of server/global zone after that Solaris 11 share local zone not able to ping the default gateway but global zone able to ping same default gateway. I check/compare the before activity logs of global zone and local zones which looks fine to me, further IP and netmask of global zones looks fine to me as well.

When I ran the traceroute to default gateway from globel zone it goes though particular interface and one same interface local zone virtual IP is also configured of same range . When I ran the traceroute from localzone to default gateway it doesn't show any interface other than 0.0.0.0

Can some one help me in troubleshooting the steps in this situation. Does reboot can resolve this issue as I am not finding any difference in network configuration before reboot and after reboot

Note: default route is same for global and local zone. I am not in position to share the logs related to configuration of network

Can you please explain what you mean by "default local zone"?

You have one machine with a global zone and how many non-global zones?

Which can't ping to which?

Hi hicksd8

Thank for notifying me for my mistake. I have done correction

------ Post updated at 10:32 PM ------

I have one local zone in Solaris 11 Box. Actually I am not able to connect from local zone to other machine due to default route issue at local zone level and same default route is present at its global zone which is able to ping the default gateway and not facing any issue.

You might want to anonymize the global zone and non-global zone network settings and post them here. It is quite difficult to understand how your network and your zone are configured without them.

Here are relevant commands :

Code:

zonecfg -z xxx info
ifconfig -a
netstat -rn
netadm list
dladm show-phys
dladm show-link
dladm show-linkprop
dladm show-vnic
dladm show-etherstub 
ipadm show-if
ipadm show-ifprop 
ipadm show-addr
ipadm show-addrprop

Thanks jlliagre / Hicksd8/ Jim McNamara

I resolve this issue temporary after finding out local zone interface in "tentative" state from "ipadm show-addr" command.
I down that interface and add the one more virtual interface in local zone by running " ifconfig <virtual interface> plumb <IP address> Netmask 255.255.255.0 zone <zone name > up. Yes that true that I had one more virtual interface on same interface with same address which I unplumb it two days back due to which actual zone interface goes into tentative state.

Now I have two queries. First query is that is there any way to get rid of zone actual virtual interface's tentative state other reboot of global or local zone as I am not able to find anything related to tentative state much on google search.

Second query is how can we add the IP/interface on the fly to running solaris 11 local zone on the fly other than ifconfig command.

Further if I add the IP on the local zone on the fly by above mention ifconfig command on the first column of "ipaddm show-addr'' command output it show v4a instead of zoneadm something against the virtual interface which I added to resolve the issue. Why it show like that


Note : I am not in a position to share the output of above command

ifconfig usage is depreciated in solaris 11.
It still works tho, but ipadm should be used.

We need to have output of those commands, to see your configuration.
Otherwise, we can guess, and words are often misunderstood.
You can change the names, addresses or whatever you see as sensitive information.

In Solaris there are two general ways to configure zone network.

Basically :
exclusive ip stack - a layer 2 network, with vnics created for each zone, having isolated ip stack.
shared ip stack - a layer 3 network, with global zone doing all the network stuff.

In first case, network configuration will be done from inside zone using standard ipadm command.
In second case, network stack is handled by zone configuration, where you define ip address, and other IP parameters using zonecfg

If zone is created from default template, an exclusive ip stack will be used.

Hope that helps.
Regards
Peasant.

Thanks Peasant for the reply and explanation.

Due to restriction I cannot copy the data , further definitely I would have change the sensitive details while sharing the data but can you let me know if the interface state goes into tentative state, how to get rid of tentative state other that rebooting the zone. Tentative state information is mention on below link . I even tried to up and down the interface as well but still it show the state tentative then I just down that interface and create the interface from ifconfig command temporarily

Basic Network Configuration in Oracle Solaris 11 | Oracle Community

Second query is how can we add the IP/interface on the fly to running solaris 11 local zone on the fly other than ifconfig command.

Regards
sb200