How to enable ip forward in opensolaris

-
Well, you think this task is simple, like in linux, where you type in
a console "echo "1" > /proc/sys/net/ipv4/ip_forward"

In opensolaris this task is more complicated.
Why?because, they can :)

root@opensolaris:/net# uname -a
SunOS opensolaris 5.11 snv_101b i86pc i386 i86pc Solaris

to check if the ip forward is enabled type:

root@opensolaris:/net# svcs -a | grep forward
disabled 10:24:40 svc:/network/ipv6-forwarding:default
disabled 12:46:49 svc:/network/ipv4-forwarding:default

in this case, it is disabled (by default)

To enable it, you can do:

- root@opensolaris:~# ifconfig pcn0 router

for ipv6:

root@opensolaris:~# ifconfig pcn0 inet6 router

- root@opensolaris:~# ndd -set /dev/ip ip_forwarding 1

for ipv6:

root@opensolaris:~# ndd -set /dev/ip ip6_forwarding 1
- In the previous Solaris releases

root@opensolaris:~# routeadm -e ipv4-forwarding

for ipv6:

root@opensolaris:~# routeadm -e ipv6-forwarding

To disable ip forward

root@opensolaris:~# ifconfig pcn0 -router
root@opensolaris:~# ifconfig pcn0 inet6 -router

root@opensolaris:~# ndd -set /dev/ip ip_forwarding 0
root@opensolaris:~# ndd -set /dev/ip ip6_forwarding 0

root@opensolaris:~# routeadm -d ipv4-forwarding
root@opensolaris:~# routeadm -d ipv6-forwarding

After this you must start the ip_forward service.To do this type:

root@opensolaris:~# svcadm enable network/ipv4-forwarding

To stop this service type root@opensolaris:~# svcadm disable
network/ipv4-forwarding

To test if the ip forward is enabled type:

root@opensolaris:~# svcs -a | grep forward
disabled 10:24:40 svc:/network/ipv6-forwarding:default
online 13:01:32 svc:/network/ipv4-forwarding:default

In my case only the ipv4 was enabled.

Also you cat check by running routeadm

root@opensolaris:~# routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding enabled enabled
IPv6 forwarding disabled disabled

Routing services "route:default ripng:default"
[...]

That is all.Enjoy :)

Anyway, to have a working server, ipfilter/ipnat is your friend.
More to come about this issue later ;)

Update: more about NAT here

Comments

Post a Comment

Popular posts from this blog

Why sometimes oracle 10g XE sucks big time

-
A few days ago, one of my web application that use as backend oracle (i'm running oracle-xe-10.2.0.1-0.1) hangs and refuse to work. I was very surprised of this, because i was more than sure that i did not made any modifications on my web server. First thing i look into it was the apache web server.I try to restart the web server, check the php lib file to see if it is corrupted or missing, check the ORA_HOME enviroment, check it the DMZ server where the oracle 10XE is running respond to my pings and telnets in 1521.Every thing was working as espected, except my web application.I was very frustrated and disappointed. After a while, it hit me, why not check the sqlplus client from ORA_HOME path. Tannnnaaaa...this was the problem.The sqlclient refuse to work or connect to the oracle server. This is the output of the strace that i did on sqlplus \0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 256) = 256 13100 lseek(6, 512, SEEK_SET) = 512 13100 read(6, "\337y \0\0\0\0\0\0\0\0\0\0\...
Read more

NAT in opensolaris

-
Firt, you must enable ip forwarding in your opensolaris box. Let's suppose thet we have two network adapters, one is elxl0(80.xxx.xxx.xxx), this is connect to the internet, and the second one is e1000g0 connected to the intranet (172.16.16.1) ipnat.conf file can be located anyware on the system, in /etc/ipnat.rules, /usr/local/etc/ipnat.rules, or /etc/opt/ipf/ipnat.rules In opensolaris, /network/ipv4-forwarding service is using /etc/ipf/ipnat.conf file cd /etc/ipf echo >> ipnat.conf (if it's missing) Insert in ipnat.conf file this line map elxl0 172.16.16.0/24 -> 0/32 The easiest way to load a NAT rule set is: ipnat -CF -f /etc/ipnat.conf To test if the rules from ipnat.rules are loaded, type from root account: ipnat -l The output look like this root@freya:/etc/ipf# ipnat -l List of active MAP/Redirect filters: map elxl0 172.16.16.0/24 -> 0.0.0.0/32 [...] List of active sessions: MAP 172.16.16.2 12769 80.xxx.xxx.xxx 12769 [86.xxx.21.xxx 53] Finally, ...
Read more

Review of Yashica ML 50mm F2

-
Image
Yashica ML 50mm/2 lens at F/2, full manual focus   * The purchase - I got this lens from ebay, it is cheap :)  - It's working on my Canon camera with   this   adapter.   * What I like:  - Metal case, built to last forever, quality of the lens seems good . - Aperture ring feels smooth, I like the "click click" sound . - It's very sharp at F/2, this was a big surprise for me, because I was using the Canon EF 50mm F1.8, which is sharp maybe at F8, and is feels(and sounds) like broken mcdonald's toy. - The bokeh is very nice, interesting "spinning" effect. - Colors are saturated.   * What I don't like:  - At F/11->F/16, pictures are strange, colors shades, details are missing. - Aperture ring is too close to the body, this is a a little bit annoying, but this is by design, I have to get used to it.   Sample images - The ground level point of view Sample images - Miracle
Read more