Thanks, if that is the case, what do I need to do to make ip-type=exclusive 
work in a non-global zone? What I mean is, my interface name in the global zone 
is e1000g0:

-bash-3.00 (global zone)# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 
index 1
        inet 127.0.0.1 netmask ff000000
e1000g0: flags=201004843<UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4, CoS> mtu 
1500 index 2
        inet 192.168.16.147 netmask ffffff80 broadcast 192.168.16.255
        ether 0:6:5b:cf:6b:3c
lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 
index 1
        inet6 ::1/128

Say I use a zonecfg that looks like this:

-bash-3.00# more exclusivezonecfg
create -b
set zonepath=/export/zone/excl1
set autoboot=true
set ip-type=exclusive
add inherit-pkg-dir
set dir=/lib
end
add inherit-pkg-dir
set dir=/platform
end
add inherit-pkg-dir
set dir=/sbin
end
add inherit-pkg-dir
set dir=/usr
end
add net
set physical=e1000g1
end
add attr
set name=comment
set type=string
set value="Zone exc1l"
end

(I am trying to use e1000g1 in the non-global zone). When I install:

-bash-3.00# zoneadm -z excl1 install
WARNING: skipping network interface 'e1000g1' which cannot be opened.
Preparing to install zone <excl1>.
...

-bash-3.00# zoneadm -z excl1 boot
WARNING: skipping network interface 'e1000g1' which cannot be opened.
zoneadm: zone 'excl1': WARNING: unable to hold network interface 'e1000g1'.: 
Invalid argument

When I login to the zone (zlogin -C excl1), I am not asked for network 
configuration. 

Bottomline, what do I need to do so that I can configure ip-type=exclusive in 
the non-global zone? My requirement is that I want to run ipfilter in the 
non-global zone. I really hope it is still possible, I had given up yesterday 
when vnics didn't work.

(non-global zone)# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 
index 1
        inet 127.0.0.1 netmask ff000000
lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 
index 1
        inet6 ::1/128
 
 
This message posted from opensolaris.org
_______________________________________________
zones-discuss mailing list
zones-discuss@opensolaris.org

Reply via email to