Have you considered using vlans?
I just use one physical interface and vlan tag different segments for the
various subnets.
For example:
[root@00-15-17-20-9d-de ~]# vmadm get 94391c9b-32df-4295-9e8d-24891ed6a03b
| /usr/bin/json nics
[
{
"interface": "net0",
"mac": "32:57:b9:2e:33:c5",
"vlan_id": 216,
"nic_tag": "external",
"ip": "192.168.1.11",
"netmask": "255.255.255.0"
},
{
"interface": "net1",
"mac": "d2:06:4c:cf:4d:47",
"vlan_id": 229,
"nic_tag": "external",
"gateway": "XXX",
"ip": "XXX",
"netmask": "255.255.255.224",
"primary": true
}
]
Nicholas
On Sun, Aug 17, 2014 at 4:39 AM, G B via smartos-discuss <
[email protected]> wrote:
> I'm stumped for the moment, so maybe somebody can alleviate my block.
>
> Currently I have a firewall with dmz and internal interfaces each going
> to a physical switch. What I'd like to do is removed the dmz physical
> switch and have my dmz servers go through a virtual switch, but that is
> what has me stumped.
>
> I created an etherstub: # dladm create-etherstub vswitch0
>
> Then I created a vnic: # dladm create-vnic -l vswitch0 vnic0
>
> Next I intended to plug the CAT6 cable into vnic0, then I would create
> another vnic and put that in a zone. But:
>
> 1) I'm not sure if that is correct
> 2) I'm unsure what the syntax is for the json file for the vnic
>
> Another thing is presently the physical nic on the server goes to the
> physical dmz switch. Not sure what I'd change to eliminate the dmz
> physical switch for the dmz server's physical nic.
>
> *smartos-discuss* | Archives
> <https://www.listbox.com/member/archive/184463/=now>
> <https://www.listbox.com/member/archive/rss/184463/25241303-ebebecbc> |
> Modify
> <https://www.listbox.com/member/?&;>
> Your Subscription <http://www.listbox.com>
>
-------------------------------------------
smartos-discuss
Archives: https://www.listbox.com/member/archive/184463/=now
RSS Feed: https://www.listbox.com/member/archive/rss/184463/25769125-55cfbc00
Modify Your Subscription:
https://www.listbox.com/member/?member_id=25769125&id_secret=25769125-7688e9fb
Powered by Listbox: http://www.listbox.com
