Installing Ranger Gateway In Solaris 10 Zones - Tavve zoneranger User Manual

I. Installing Ranger Gateway in Solaris 10 Zones
Solaris 10 zones are used as a means of virtualization for applications running on Sun hardware
systems. Solaris zones are used to isolate applications from each other while running on the same
hardware platform. This implementation can be used to run multiple management applications on
the same Sun server with each application installed in distinct zones.
There is one root or global zone. The global zone has complete access to the system. All other
zones are created to have only access to specific resources on the system. There are some operating
system capabilities which are only available from the global zone. One of those capabilities is the
manipulation of network routes.
If one or more zones are running management applications, it is possible to install the Ranger
Gateway with those management applications in order for those applications to manage ZoneRanger
managed devices. However, due to the inability for non-global zones to manage network routes,
the Ranger Gateway GVI will not install in non-global zones. In order for the Ranger Gateways
installed in the non-global zones to use GVI in a Solaris 10 zones enviroment, the GVI must be
installed in the global zone and the GVI driver made available to the non-global zones in which the
Ranger Gateway is installed.
To install the GVI in the global zone, copy the file gvi.zip from the gvi directory on the Ranger
Gateway installation CD to a local directory on the solaris 10 server. For this example, the gvi.zip
file was placed in the /usr/gvi directory. As root,
cd /usr/gvi
unzip gvi.zip
./gviinstall.ksh
This will install a new device at /dev/tun. This device needs to be made available to any zones
which will have the Ranger Gateway installed. Please see Solaris 10 documentation on how this is
accomplished.
To verify the /dev/tun driver is available for a Solaris zone, run the command:
zonecfg -z ZoneNameHere info
The results should include the following:
device
Once the /dev/tun is available in the zone, the Ranger Gateway can be installed in that zone as the
root user.
ZoneRanger 5.5 User's Guide
match: /dev/tun
377