Zones In Separate Networks Using Exclusive Ip Instances - Sun Microsystems SOLARIS 10 Manual

Version 3.1-en
Solaris 10 Container Guide - 3.1 5. Cookbooks

5.2.7.5. Zones in separate networks using exclusive IP instances

[dd] Two local zones, zone1 and zone2, are located in separated networks and provide services for
other networks.
Each local zone should have its own physical interface in the network.
Additional networks are connected to the network segment.
Routing is used.
There should be no communication between local zones.
Communication between the global zone and the local zones is not intended.
Implementation:
A separate GLDV3 interface (e.g. b g e 1 and b ge 2) is provided for each zone. These
interfaces must not be used elsewhere in the global zone.
z one 1 - z o n e c f g : a d d n e t p hy s ic al = bg e1
z one 2 - z o n e c f g : a d d n e t p hy s ic al = bg e2
The zone configuration for zone1 and zone2 is converted to the use of exclusive IP
instances.
z one c f g : s e t i p - t y p e = e x c lu s iv e
In the zones, the IP addresses and the default router are specified in the usual way.
Z one 1 : / e t c / h o s t n a m e . b g e1
Z one 2 : / e t c / h o s t n a m e . b g e2
/ etc / d e f a u l t r o u t e r
Through the exclusive IP instances, communication between the zones or between the
zones and the global zone takes place only if corresponding routing entries exist in the zones
and if a physical network connection exists between the zone interfaces.
192.168.201.0
Network
Figure 35: [dd] Zones in separate networks using exclusive IP instances
bge1 - 192.168.201.1
bge2 - 192.168.202.1
Def router - 192.168.201.2
Def router - 192.168.202.2
ip type: exclusive ip type: exclusive
Zone 1
bge0 - 192.168.1.1
ip type: shared
Global Zone
192.168.1.0
Network
Zone 2
Effective: 30/11/2009
192.168.202.0
Network
87