Re: [zones-discuss] nevada zone with NAT and NFS

2007-04-30 Thread Jeff Victor
I don't know about other people, but I would need more configuration 
information before beginning to untangle this.


Laszlo (Laca) Peter wrote:

Hi,

I'm trying to set up zones with NAT on snv_60.
I followed the instructions found in various blogs and web pages
and got it mostly working, but I'm having trouble with certain
NFS mounts.  ls /net/somehost works but ls /net/someotherhost
doesn't.  I'm getting No such file or directory from the zone
(works fine from the global zone).
Similar issue with the automounted home directories:
ls /home/myuser reports permission denied.

At least some of the servers that I can't access are using
NFSv3, in case that matters.

I'm probably missing something obvious, but what is it?

Thanks,
Laca



--
--
Jeff VICTOR  Sun Microsystemsjeff.victor @ sun.com
OS AmbassadorSr. Technical Specialist
Solaris 10 Zones FAQ:http://www.opensolaris.org/os/community/zones/faq
--
___
zones-discuss mailing list
zones-discuss@opensolaris.org


Re: [zones-discuss] nevada zone with NAT and NFS

2007-04-30 Thread Laszlo (Laca) Peter
On Mon, 2007-04-30 at 19:48 -0400, Jeff Victor wrote:
 I don't know about other people, but I would need more configuration 
 information before beginning to untangle this.

Okay.  Just wasn't sure what, so here's more info, in the global zone:

$ cat /etc/ipf/ipnat.conf 
# allow any 192.168.1.x zone to use the internet
map e1000g0 192.168.1.0/24 - 0/32 proxy port ftp ftp/tcp
map e1000g0 192.168.1.0/24 - 0/32 portmap tcp/udp auto
map e1000g0 192.168.1.0/24 - 0/32

$ cat /etc/ipf/ipf.conf 
#
# ipf.conf
#
# IP Filter rules to be loaded during startup
#
# See ipf(4) manpage for more information on
# IP Filter rules syntax.
pass in quick all keep state keep frags
pass out quick all keep state keep frags

The local zone is a whole root zone on zfs, with the following
network config:

  network address=192.168.1.3 physical=e1000g0/

# ifconfig e1000g0:2
e1000g0:2: flags=201000843UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS mtu
1500 index 2
zone xfce
inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
# netstat -nr

Routing Table: IPv4
  Destination   Gateway   Flags  Ref Use Interface 
  - - -- - 
default  129.156.226.1UG1 40   
default  192.168.1.254UG1177   
129.156.226.0129.156.226.169  U 1 74 e1000g0   
129.156.226.0192.168.1.2  U 1  0 e1000g0:1 
192.168.1.0  192.168.1.2  U 1 19 e1000g0:1 
224.0.0.0129.156.226.169  U 1  0 e1000g0   
127.0.0.1127.0.0.1UH1 82 lo0   

In the zone:

# ifconfig -a
lo0:1: flags=2001000849UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL mtu
8232 index 1
inet 127.0.0.1 netmask ff00 
e1000g0:2: flags=201000843UP,BROADCAST,RUNNING,MULTICAST,IPv4,CoS mtu
1500 index 2
inet 192.168.1.3 netmask ff00 broadcast 192.168.1.255
# netstat -nr

Routing Table: IPv4
  Destination   Gateway   Flags  Ref Use Interface 
  - - -- - 
default  192.168.1.254UG1177   
192.168.1.0  192.168.1.3  U 1 76 e1000g0:2 
224.0.0.0192.168.1.3  U 1  0 e1000g0:2 
127.0.0.1127.0.0.1UH1  0 lo0:1 

# ping someserv
someserv is alive
# ls /net/someserv
/net/someserv: No such file or directory
# ssh [EMAIL PROTECTED]
Password: 
Last login: Thu Apr 26 17:28:43 2007 from foo
Sun Microsystems Inc.   SunOS 5.10  Generic January 2005

In the global zone ls /net/someserv works fine.

Not sure what else may be relevant.

Thanks,
Laca

 Laszlo (Laca) Peter wrote:
  Hi,
  
  I'm trying to set up zones with NAT on snv_60.
  I followed the instructions found in various blogs and web pages
  and got it mostly working, but I'm having trouble with certain
  NFS mounts.  ls /net/somehost works but ls /net/someotherhost
  doesn't.  I'm getting No such file or directory from the zone
  (works fine from the global zone).
  Similar issue with the automounted home directories:
  ls /home/myuser reports permission denied.
  
  At least some of the servers that I can't access are using
  NFSv3, in case that matters.
  
  I'm probably missing something obvious, but what is it?
  
  Thanks,
  Laca
 
 

___
zones-discuss mailing list
zones-discuss@opensolaris.org