Sun-microsystems SOLARIS 10 Uživatelský manuál stáhnout pdf (Strana 94)

Version 3.1-en Solaris 10 Container Guide - 3.1 5. Cookbooks Effective: 30/11/2009

5.2.7.5. Zones in separate networks using exclusive IP instances

[dd] Two local zones, zone1 and zone2, are located in separated networks and provide services for

other networks.

− Each local zone should have its own physical interface in the network.

− Additional networks are connected to the network segment.

− Routing is used.

− There should be no communication between local zones.

− Communication between the global zone and the local zones is not intended.

Implementation:

• A separate GLDV3 interface (e.g. b ge1 and bge2) is provided for each zone. These

interfaces must not be used elsewhere in the global zone.

zone 1 -zone cfg: a dd n e t phy sical =bge1

zone 2 -zone cfg: a dd n e t phy sical =bge2

• The zone configuration for zone1 and zone2 is converted to the use of exclusive IP

instances.

zone c fg: s et ip - type = exclu sive

• In the zones, the IP addresses and the default router are specified in the usual way.

Zone 1: /e tc/ho s tnam e .bge1

Zone 2: /e tc/ho s tnam e .bge2

/etc / defau ltrou t er

• Through the exclusive IP instances, communication between the zones or between the

zones and the global zone takes place only if corresponding routing entries exist in the zones

and if a physical network connection exists between the zone interfaces.

Figure 35: [dd] Zones in separate networks using exclusive IP instances

192.168.201.0

Network

/jointfilesconvert/1280573/bge0 - 192.168.1.1

ip type: shared

Global Zone

/jointfilesconvert/1280573/bge2 - 192.168.202.1

Def router - 192.168.202.2

ip type: exclusive

Zone 2

/jointfilesconvert/1280573/bge1 - 192.168.201.1

Def router - 192.168.201.2

ip type: exclusive

Zone 1

192.168.1.0

Network

192.168.202.0

Network

1 2 ... 89 90 91 92 93 94 95 96 97 98 99 ... 120 121

Žádné komentáře

Sun-microsystems SOLARIS 10 Uživatelský manuál Strana 94