Computer Hardware User Manual

Version 3.1-en Solaris 10 Container Guide - 3.1 5. Cookbooks Effective: 30/11/2009
5.2.7.5. Zones in separate networks using exclusive IP instances
[dd] Two local zones, zone1 and zone2, are located in separated networks and provide services for
other networks.
− Each local zone should have its own physical interface in the network.
− Additional networks are connected to the network segment.
− Routing is used.
− There should be no communication between local zones.
− Communication between the global zone and the local zones is not intended.
Implementation:
• A separate GLDV3 interface (e.g. b ge1 and bge2) is provided for each zone. These
interfaces must not be used elsewhere in the global zone.
zone 1 -zone cfg: a dd n e t phy sical =bge1
zone 2 -zone cfg: a dd n e t phy sical =bge2
• The zone configuration for zone1 and zone2 is converted to the use of exclusive IP
instances.
zone c fg: s et ip - type = exclu sive
• In the zones, the IP addresses and the default router are specified in the usual way.
Zone 1: /e tc/ho s tnam e .bge1
Zone 2: /e tc/ho s tnam e .bge2
/etc / defau ltrou t er
• Through the exclusive IP instances, communication between the zones or between the
zones and the global zone takes place only if corresponding routing entries exist in the zones
and if a physical network connection exists between the zone interfaces.
87
Figure 35: [dd] Zones in separate networks using exclusive IP instances
192.168.201.0
Network
bge0 - 192.168.1.1
ip type: shared
Global Zone
bge2 - 192.168.202.1
Def router - 192.168.202.2
ip type: exclusive
Zone 2
bge1 - 192.168.201.1
Def router - 192.168.201.2
ip type: exclusive
Zone 1
192.168.1.0
Network
192.168.202.0
Network