Stuart, Attached are my notes on how to configure link-based (not probe-based) IPMP for Solaris 10. There is nothing special that you have to do with ipfilter other than create rules for both interfaces, eg bge0 and bge1.
Jeff Earickson Colby College On Wed, 29 Nov 2006, Stuart Remphrey wrote:
Date: Wed, 29 Nov 2006 15:21:50 +1100 From: Stuart Remphrey <[EMAIL PROTECTED]> To: [email protected] Subject: IP Filter and IPMP on Solaris 10 (ipf 3.0.4, pfil 2.1.4) G'day all, Trying to get Solaris IPMP (IP MultiPathing) group recognised by IP Filter, using the ipf & pfil as supplied with Solaris 10 (currently 6/06). I can define the IPMP groups as something like: ndd -set /dev/pfil qif_ipmp_set ipmp0=ce0,ce1 (it seems names besides ipmp can also be used, such as "db", "web", whatever) Then see them with: ndd -get /dev/pfil qif_ipmp_status Now, am I supposed to then use "on ipmp0" in a rule, something like: pass in log first quick on ipmp0 from X to Y port = 22 flags S keep state (or S/SA, S/SAFR, whatever) Incoming SSH does not match this rule, but if I change to "on ce0" it works as before (however then I'm concerned it may not track the state across to ce2 if the link or switch on ce0 fails). Rgds, Stuart. Stuart Remphrey RMIT ITS Infrastructure Services - Unix Systems Phone (03) 992 55 070 (or extension 55070)
How to configure ---------------- You just have to fiddle with /etc/hostname.[devices]. For a T1000, with IP number 137.146.28.137 and two bge interfaces, you would do: /etc/hostname.bge0: 137.146.28.137 netmask + broadcast + group ipmp0 up /etc/hostname.bge1: group ipmp0 up The groupname (ipmp0 here) can be anything you want, they just have to match. Reboot after making these changes OR set up things by hand: ifconfig bge0 group ipmp0 ifconfig bge1 plumb ifconfig bge1 group ipmp0 ===> NOTE!!! You will have to modify /etc/ipf.conf to allow traffic on both interfaces!! How to Test and Troubleshoot ----------- Both interfaces should see the same traffic via "snoop -d interface". Ie, "snoop -d bge0" and "snoop -d bge1" should see the same traffic going by. If not, then the switch is misconfigured. To simulate bge0 going offline: if_mpadm -d bge0 To simulate bge0 recovering: if_mpadm -r bge0 To see if a link is up: kstat bge0 | grep link
