Yates, Spencer A. wrote: > The current TX document describes two methods to configure network > interfaces for zones/clearance levels: > SDTShareLogical - ifconfig bge0:3 all-zones > SDTSharePhysical - ifconfig bge0 all-zones > > My SunFire V210 has 4 interfaces. Can I configure each clearance > level to use a different network interface? For instance, > global - bge0 > PUBLIC - bge1 > CONFIDENTIAL - bge2 > SANDBOX - bge3
Yes, this should work. > > I have tried touching the following files /etc/hostname.bge[0123] and > svccfg each zone as follows: > add net > set physcial=bge1 > set address=X.X.X.X > end > commit > > But I'm unable to get the zones to communicate with the global zone's > LDAP server. Try creating an additional interface, bge0:1, on the same subnet as bge0, and make it all-zones, for example, create a file /etc/hostname.bge0:1 with the following contents foo all-zones You will need to reboot. --Glenn