Configure Solaris zone on new network

configure, network, solaris, zone

Thread Tools Search this Thread
# 1  
Old 10-09-2018
Configure Solaris zone on new network


I have a Solaris 10 zone which I need to configure on a new network. I have configured the new IP on the zone itself and I can ping the interface from a node on the same network, but not from another network. Basically I need to know how to route the traffic from the zone to it's default gateway.


BGE0 - IP - GW

BGE1 - IP - GW

Zone IP: - GW

Default Gateway on the global zone is

I've looked up IPFilters and come up with the entry below. I'm just wondering would this entry work? I just want to be sure before enabling IPFilters and adding entries as I have a number of prod zones running on this global zone and don't want to break the networking.

pass out quick on bge0 to bge1: from to any

Any help is greatly appreciated.
# 2  
Old 10-09-2018
On Solaris 10 zones they are configured autonomously and are not aware of the global zone configuration which is independent of the local zone.

On Solaris 10 the default gateway is configured in /etc/defaultrouter which normally contains one single line with a left justified ip address of the gateway, for example:


and that's all there is in the file. It may be edited with your favorite editor and is then read at (zone) boot time.

So you can mess with this inside the local zone and not affect your global zone.

Last edited by hicksd8; 10-09-2018 at 03:16 PM..
# 3  
Old 11-07-2018
Thanks for the reply Hicksd8, but I did find out what I needed to do. Configuring the /etc/defaultrouter doesn't seem to work within the child zone. I had to configure the 'set defrouter=X.X.X.X' within the zone config. That enabled the default route I needed in order for the child zone to use the new network configured on the global zone. This does bring a problem though on the global zone as there is now more than one default route configured on it. Oracle don't recommend you do it this way due to this problem, but don't offer an alternative really.
We can live with that though as the global zone is only hosting child zones and nothing else. The zones seem to be working fine now.

# 4  
Old 11-07-2018
Hi Sparcman,

Not always possible to go with a single default router when you have zones running!

e434069 on PROD cathsunvs04 # netstat -rn

Routing Table: IPv4
  Destination           Gateway           Flags  Ref     Use     Interface
-------------------- -------------------- ----- ----- ---------- ---------
default             UG        1   33946214
default               UG        1    8542007 igb3001
default             UG        1   61236230 igb180003
default               UG        1      61025
default               UG        1          0 ixgbe2059000
default            UG        1      43367 igb8001
default            UG        1       1920 igb8001
default               UG        1     611711 igb9001
default               UG        1     432279 igb2001
default             UG        1         82 igb202002
default             UG        1     997182 igb119002
default               UG        1       1892 igb5003
default             UG        1    4011231 igb185003
default             UG        1        158 igb184003          U         1        845 ixgbe140001            U         1          1 igb140000          U         1          7 igb185003       U         1      18688 usbecm0           U         1          0 igb185003
e434069 on PROD cathsunvs04 # zoneadm list -cv
  ID NAME             STATUS     PATH                           BRAND    IP
   0 global           running    /                              native   shared
  15 cathvs3-gtapp14  running    /zones/cathvs3-gtapp14         solaris8 shared
  20 cathvs2-isd250   running    /zones/cathvs2-isd250          native   shared
  25 cathvs-dbadev    running    /zones/cathvs-dbadev           native   shared
  26 cathvs-cathora7sun01 running    /zones/cathvs-cathora7sun01    solaris8 shared
  32 cathvs3-cathams  running    /zones/cathvs3-cathams         solaris8 shared
  34 cathvs-custdirdev running    /zones/cathvs-custdirdev       native   shared
  38 cathvs3-catccsrv02 running    /zones/cathvs3-catccsrv02      solaris9 shared
  45 cathvs2-canalysis1 running    /zones/cathvs2-canalysis1      solaris9 shared
  46 cathvs-fabman    running    /zones/cathvs-fabman           native   shared
  53 cathvs3-cathmars1 running    /zones/cathvs3-cathmars1       solaris9 shared
  58 cathvs3-cathmwm  running    /zones/cathvs3-cathmwm         solaris8 shared
  62 cathvs3-cathnidp running    /zones/cathvs3-cathnidp        solaris8 shared
  72 cathvs2-fabman   running    /zones/cathvs2-fabman          solaris8 shared
  78 cathvs3-phys-hhdc2 running    /zones/cathvs3-phys-hhdc2      solaris9 shared
  79 cathvs3-phys-hhdc1 running    /zones/cathvs3-phys-hhdc1      solaris9 shared
  83 cathvs2-cathnhhda-ooa running    /zones/cathvs2-cathnhhda-ooa   native   shared
  84 cathvs2-cathlaatp2 running    /zones/cathvs2-cathlaatp2      solaris8 shared
  97 fdbsphback01     running    /zones/fdbsphback01            native   shared
  99 cathvs2-cathnhhda-oas running    /zones/cathvs2-cathnhhda-oas   native   shared
   - cathvs3-erdrtest installed  /zones/cathvs3-erdrtest        native   shared



Thread Tools Search this Thread
Search this Thread:
Advanced Search

More UNIX and Linux Forum Topics You Might Find Helpful
Solaris 11 Global zone patching having Solaris 10 branded zone amity Solaris 2 02-21-2018 02:34 AM
Solaris non-global zone network vlan Shirishlnx Solaris 0 04-26-2016 02:56 PM
Solaris 10: I forgot to detach a zone before zpool export. Uninstall zone? custos UNIX for Advanced & Expert Users 2 10-06-2014 12:58 PM
Unable to get Solaris 11 Zone onto the network unblockable Solaris 6 12-16-2013 02:47 PM
Branded Solaris 10 zone no network aeroforce Solaris 1 09-26-2013 12:03 PM
Solaris 10 local zone on Solaris 11 global zone aixlover Solaris 5 01-25-2012 07:39 PM
Configure network interface for Solaris 10 ajhal04 Solaris 1 09-14-2011 03:33 PM
Configure a network printer on solaris papertiger Solaris 1 08-20-2011 10:57 AM
configure zones to have different network interface and network skamal4u Solaris 9 07-25-2011 02:00 AM
Creating A Solaris Zone - Unable to install - Are network settings required? newbiesolaris10 Solaris 4 04-13-2010 05:50 PM
Configure network card in Sun Solaris 10 for Dell Optiplex 745 veasnabee Solaris 5 04-08-2009 12:20 AM
how to configure network in solaris 10? johnavery Solaris 3 10-29-2008 04:16 AM
Solaris 10 network configuration problem with zone duke0001 Solaris 6 10-12-2007 11:02 AM
How to configure the network at Sun Solaris jameswong UNIX for Dummies Questions & Answers 2 03-28-2002 03:30 AM