Follow Techotopia on Twitter

On-line Guides
All Guides
eBook Store
iOS / Android
Linux for Beginners
Office Productivity
Linux Installation
Linux Security
Linux Utilities
Linux Virtualization
Linux Kernel
System/Network Admin
Programming
Scripting Languages
Development Tools
Web Development
GUI Toolkits/Desktop
Databases
Mail Systems
openSolaris
Eclipse Documentation
Techotopia.com
Virtuatopia.com

How To Guides
Virtualization
General System Admin
Linux Security
Linux Filesystems
Web Servers
Graphics & Desktop
PC Hardware
Windows
Problem Solutions

  




 

 

Solaris Trusted Extensions Installation and Configuration
Previous Next

Associating Network Interfaces With Zones by Using CDE Actions (Task Map)

Do only one of the following tasks. For the trade-offs, see Planning for Multilevel Access.

Task

Description

For Instructions

Share a logical interface.

Map the global zone to one IP address, and map the labeled zones to a different IP address.

Specify Two IP Addresses for the System by Using a CDE Action

Share a physical interface.

Map all zones to one IP address.

Specify One IP Address for the System by Using a CDE Action

Specify Two IP Addresses for the System by Using a CDE Action

In this configuration, the host's address applies only to the global zone. Labeled zones share a second IP address with the global zone.

Before You Begin

You are superuser in the global zone. The system has already been assigned two IP addresses. You are in a Trusted CDE workspace.

  1. Navigate to the Trusted_Extensions folder.
    1. Click mouse button 3 on the background.
    2. From the Workspace menu, choose Applications → Application Manager.
    3. Double-click the Trusted_Extensions folder icon.

      This folder contains actions that set up interfaces, LDAP clients, and labeled zones.

  2. Double-click the Share Logical Interface action and answer the prompts.

    Note - The system must already have been assigned two IP addresses. For this action, provide the second address and a host name for that address. The second address is the shared address.


    Hostname:   Type the name for your labeled zones interface
    IP Address: Type the IP address for the interface

    This action configures a host with more than one IP address. The IP address for the global zone is the name of the host. The IP address for a labeled zone has a different host name. In addition, the IP address for the labeled zones is shared with the global zone. When this configuration is used, labeled zones are able to reach a network printer.


    Tip - Use a standard naming convention for labeled zones. For example, add -zones to the host name.


  3. (Optional) In a terminal window, verify the results of the action.
    # ifconfig -a

    For example, the following output shows a shared logical interface, hme0:3 on network interface 192.168.0.12 for the labeled zones. The hme0 interface is the unique IP address of the global zone.

     lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
             inet 127.0.0.1 netmask ff000000 
             ether 0:0:00:00:00:0
     hme0: flags=1000843<BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
             inet 192.168.0.11 netmask fffffe00 broadcast 192.168.0.255
     hme0:3 flags=1000843<BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
             all-zones
             inet 192.168.0.12 netmask fffffe00 broadcast 192.168.0.255

Specify One IP Address for the System by Using a CDE Action

In this configuration, the host's address applies to all the zones, including the labeled zones.

Before You Begin

You are superuser in the global zone. You are in a Trusted CDE workspace.

  1. Navigate to the Trusted_Extensions folder.
    1. Click mouse button 3 on the background.
    2. From the Workspace menu, choose Applications → Application Manager.
    3. Double-click the Trusted_Extensions folder icon.

      This folder contains actions that set up interfaces, LDAP clients, and labeled zones.

  2. Double-click the Share Physical Interface action.

    This action configures a host with one IP address. The global zone does not have a unique address. This system cannot be used as a multilevel print server or NFS server.

  3. (Optional) In a terminal window, verify the results of the action.
    # ifconfig -a

    The Share Physical Interface action configures all zones to have logical NICs. These logical NICs share a single physical NIC in the global zone.

    For example, the following output shows the shared physical interface, hme0 on network interface 192.168.0.11 for all the zones.

    lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
           inet 127.0.0.1 netmask ff000000
           ether 0:0:00:00:00:0
    hme0: flags=1000843<BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
           all-zones
           inet 192.168.0.11 netmask fffffe00 broadcast 192.168.0.255
Previous Next

 
 
  Published under the terms fo the Public Documentation License Version 1.01. Design by Interspire