Jumbo Frames within Solaris 10 zones and multiple interfaces...

We have Jumbo Frames working in the Global Zone, and have the MaxFrameSize=3,3,3 etc...
We also have our AGGR's built correctly and defined aggr1:1 and aggr1:2
the problem is on boot-up, if all the name files (hostname.aggr1 and hostname.aggr1:1) are defined in the /etc directory, then you can't start the zones....?
and if you place the files in the /export/zones/<machinename>/root/etc/ directory, than the interfaces do not start-up automatically..... ?
So If I want all the interfaces in the global zone to be seen by the other zones, and for the interfaces to come live when the zones are booted.... where do the hostname.interface files live....???

Darren:
I understand where you're coming from from a technical perspective. But there is a way you could work around it.
For argument's sake, zones a+b with e1000g0 - e1000g3
From an implementation perspective, what's to stop you from:
e1000g0 / e1000g1 shared between all
e1000g2 plumbed at global, only assigned to zone a.
e1000g3 plumbed at global, only assigned to zone b.
You can certainly have an empty interface file (i.e. cp /dev/null /etc/hostname.e1000g2 ; cp /dev/null /etc/hostname.e1000g3). The interface will plumb but have no IP information configured.
This doesn't give truly exclusive interfaces to either zone, but it operates effectively as though it were.
Warning: I haven't actually tested this, but I see no reason that it wouldn't work.

Similar Messages

Solaris 11 - zones and repos

Hi,
We're customers with support and pointed our servers to access the SRU repo as per http://www.oracle.com/technetwork/articles/servers-storage-admin/o11-018-howto-update-s11-1572261.html
Now we want to get started with zones for which Oracle recommends having a local IPS repo. All the docs seem to point to the public release repo as source for this local IPS repo.
How does this work together then with the SRU? Syncing the SRU seems to result in HTTP 401 unauthorized errors.

The way zones work with IPS is that they will communicate through the global zone. This means that whatever IPS publishers have been configured in the global zone, they get exposed within each of the non-global zones though what we call a 'system proxy'. You can compare this by typing 'pkg publisher' in both the global zone and any non-global zones.
I'm not sure what problems you're experiencing, but if you have configured the support repository in the global zone, you should be able to provision (and install other software) within a non-global zone. Also, once one zone has been provisioned on the system, all the package data is cached in the global zone so that additional zone installs (rather than clones) are much faster.
We use the release repository in many examples simply because it also allows administrators to evaluate the OS even if they don't have a current support contract through Oracle, but the same will work for those who do have a support contract and wish to the use the Oracle Solaris support repository.
In terms of creating a local IPS repository, it depends on how your environment looks and how many systems you are needing to update. If this number is relatively low, you may consider just updating that system directly from the Oracle hosted repositories. However, if that number is large, you may be better off creating a local repository. This not only provides faster access for local clients, but also provides another level of change control - you can control how often you sync with the master Oracle repository. To synchronize the Oracle SRU repository, don't forget that you will need to use the key and cert options to pkgrecv to ensure that you have the appropriate credentials to access that repository.
Good luck!

Enabling Jumbo Frames in Solaris 10 with Intel NIC

Hello all! I have a Solaris 10 machine with dual Intel NICs that I wish to enable jumbo frames on, but I am unable to find any clear guidance on how to do so. Could someone either provide guidance on this or point me in the proper direction?
Thank you in advance!

Hello all! I have a Solaris 10 machine with dual Intel NICs that I wish to enable jumbo frames on, but I am unable to find any clear guidance on how to do so. Could someone either provide guidance on this or point me in the proper direction?
Thank you in advance!

Unclear on branded solaris 9 zones and ipfilter

I just managed to install my first solaris 9 zone on a solaris 10 system (v490). It has gone fairly well so far but I
am definitely "unclear on the concept" with respect to ipfilter and the zone. This is a shared ip zone.
On solaris 9 we use ipfilter 3.4.32.
I used a flar from one of these systems to install the zone. On boot, I see that our ipfboot file in /etc/rc2.d fails with
modload failures etc
You must be superuser to load a module
open device: No such file or directory
open device: No such file or directory
constructing minimal name resolution rules...
open device: No such file or directory
open device: No such file or directory
open device: No such file or directory
open device: No such file or directory
/etc/rc2.d/S65ipfboot: load of /etc/opt/ipf/ipf.conf into alternate set failed
Not switching config due to load error.
/dev/ipf: open: No such file or directory
This makes sense but as I said what do I do instead. I found this in the solaris container system admin manual
"Solaris IP Filter can be enabled in non-global zones by turning on loopback filtering as described in Chapter 26, Solaris IP Filter (Tasks), in System Administration Guide: IP Services. "
Yes, but that doesn't help me much since the IP Filter tasks simply tell me to do this in ipf.conf in the global zone.
set intercept_loopback true;
Isn't there more to it than this? A real example some place would be most helpful. And how can I make sure it is working?
Not a real ipf guru :-(

First thing to check is if your zone can access the global zone (try pinging). If this isn't the case you probably need to setup a routing entry allowing the non-global zone some access.
For example, say the global is 10.0.0.1 and the non-global 192.168.0.1 on eri0 you'd use something like:
route add 10.0.0.1 192.168.0.1 -iface
This tells your non-global zone that it can reach the global zone through the eri0 interface. Ofcourse you can also expand this to networks and such.
Another very important factor to keep in mind when dealing with internet is trying to access it from the non-global zone (as a test). Your ipnat.conf entry should be enough, my guess for to the reason for not routing the data is a non-static arp entry of your internet gateway. Now, this is a mere guess but if you have a default route in your routing table setup for Internet access (netstat -rn) make sure that the host to which the default route is pointing also has a static arp entry (man arp). If this is indeed the case you may also need to setup a routing entry as mentioned above to allow your zone access to this remote gateway.
After that things should work as usual. Hope this helps.

SWIG - C++/Java and multiple interface inheritance - SWIG typemaps

In C++ I have the following. Can someone explain how to use SWIG typemaps to accomplish multiple interface inheritance in Java? I understand there is a javainterfaces typemap built into SWIG however I am such a newb with SWIG I really don't know where to start.
class IRemoteSyncIO
public:
virtual ~IRemoteSyncIO () {}
protected:
IRemoteSyncIO () {}
private:
IRemoteSyncIO (const IRemoteSyncIO&);
IRemoteSyncIO& operator= (const IRemoteSyncIO&);
class IRemoteAsyncIO
public:
virtual ~IRemoteAsyncIO () {}
protected:
IRemoteAsyncIO () {}
private:
IRemoteAsyncIO (const IRemoteAsyncIO&);
IRemoteAsyncIO& operator= (const IRemoteAsyncIO&);
class RemoteMpe : public IRemoteSyncIO, public IRemoteAsyncIO
}Thanks!

Actually now I understand what you mean.... Ok, now I am going to modify the problem slightly and add Interface2 into the picture. The new code is:
interface Interface1<SelfType extends Interface1<SelfType>>
interface Interface2
class Superclass implements Interface1<Superclass>
class Dependant<Type extends Interface1<Type>>
   public static <Type extends Interface1<Type> & Interface2> Dependant<Type> getInstance(Class<Type> c)
     return new Dependant<Type>();
class Subclass extends Superclass implements Interface2
public Subclass()
    Dependant<Subclass> dependant = Dependant.getInstance(Subclass.class);
}Now, previously I could replace:
Dependant<Subclass> dependant = Dependant.getInstance(Subclass.class);
with
Dependant<Superclass> dependant = Dependant.getInstance(Superclass.class);
and it solved the problem, but now that Type must implement Interface2 I cannot.
The reason I added this requirement is that this is actually what is going on in my applicationI had made mistakely omited this detail from the original use-case.
Can you think up of a possible solution to this new use-case?
Thanks,
Gili

DHCP and multiple interfaces

Is it better to list each machine and interface as a separate entry in 10.5.7 DHCP or make a single entry with multiple interfaces?
I am looking at grouping my Wireless AP, instead of having to list each one separately.
For example:
MAIN-MDF00-01
XX:XX:XX:XX:XX:XX 10.0.2.1
Or
MDF-AP
XX:XX:XX:XX:XX:XX 10.0.2.1
XX:XX:XX:YY:YY:YY 10.0.2.2

Joe,
Currently you cannot base the anchoring on the AP group. It is only based on the SSID.
Now, do you really need to split up the guest into different subnets? Or are you concerned about the AP groups?
If you truly need to break up the guest to different subnets, then you would need to create different SSID on the internal and anchor controller. Then on the anchor, link to the appropriate interface.
If you are concerned about the AP group, don't be. Just because you are using the AP group, doesn't meant that all the guest ssid can't link to the same interface, they can. You can even create a dummy interface on the internal WLC, so that if the anchoring doesn't work, they do not get an address.
Cheers,
Steve
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Solaris 10 Zones and networking..

My machine has only one NIC card (rtls0) and also only one public ipv4 IP. I am at the moment unable to get more than one public IP. I've also created a few zones on the machine which I have assigned an internal IP. Now, I can connect (say SSH for example) internally to these zones just fine using their internal IP from the global zone. However, obviously the outside world would not be able to do so. So I decided to simply use the built in firewall/nat tech in Solaris in order to port forward certain ports to internal zones. (Like say set up port 2223 on the global level to forward ssh to one of my created zones' ssh) I looked up and down everywhere with the ipf and ipv4 port forwarding down to enabling it via routeadm and also setting the value of /dev/tcp ip_forwarding to 1. Then when I add the following rule to ipnat:
rdr rtls0 PUBLIC_IP/32 port 2223 -> 192.168.1.2 port 22 tcp
It still has zero effect on the forwarding. It fails to forward, and nothing I've done works. I'm on my last leg here with this issue. Am I doing something wrong with ipfilter or is there a better way to go about doing this with Solaris Zones? (I mean surely there must be an easier way to create self contained zones with applications that still run services without having to resort to assigning it its own IP, no?) Any help is appreciated, thanks.

First thing to check is if your zone can access the global zone (try pinging). If this isn't the case you probably need to setup a routing entry allowing the non-global zone some access.
For example, say the global is 10.0.0.1 and the non-global 192.168.0.1 on eri0 you'd use something like:
route add 10.0.0.1 192.168.0.1 -iface
This tells your non-global zone that it can reach the global zone through the eri0 interface. Ofcourse you can also expand this to networks and such.
Another very important factor to keep in mind when dealing with internet is trying to access it from the non-global zone (as a test). Your ipnat.conf entry should be enough, my guess for to the reason for not routing the data is a non-static arp entry of your internet gateway. Now, this is a mere guess but if you have a default route in your routing table setup for Internet access (netstat -rn) make sure that the host to which the default route is pointing also has a static arp entry (man arp). If this is indeed the case you may also need to setup a routing entry as mentioned above to allow your zone access to this remote gateway.
After that things should work as usual. Hope this helps.

MPLS TE and multiple interfaces

I want to run MPLS TE
My PE routers have 2 STM1 links connectd to P routers
If i want to reserve 200Mbps for my TE tunnel while 2 pos interfaces are not part of POS-channel RSVP will see that there is not enough BW in case there is 300 Mbps available BE , 150 for each STM1 link
So what is the solution for this situation while my OSR routers dose not support pos-channel
thx

The MPLS-TE tunnel can be configured to use multiple path options from the source to the destination so that it can choose the path it needs in the order of preference. Paths can be explicitly configured or dynamically established using the information available in the topology table and the constraints imposed. Configure the path options by issuing the tunnel mpls traffic-eng path-option command under the tunnel interface. If there is any explicit path configuration involved, define the path to be used by issuing the ip explicit-path command in global configuration mode.
http://www.cisco.com/en/US/products/sw/iosswrel/ps1830/products_feature_guide09186a0080087b0e.html

WLC-2106 and multiple interfaces on the same network

Hi there,
I recently created a TAC request to the Cisco support regarding our WLC-2106, but they could not help me. Basically I just learned that you can create new interfaces for the wireless LAN controller and then dedicate them to a given wireless network (SSID). This way I could more effectively utilize network bandwidth also. Problem is that all of the interfaces have to be in a different network segment in order to work, which is not what I want. I specifically want to have several interfaces on the same network segment.
Has anyone tried to accomplish the same?

Basically what I've misunderstood is that all the traffic generated by our wireless clients have been going through the single 100Mbit/s ethernet port on the wireless LAN controller (management interface), and to mitigate this I thought I could create new interfaces (ports) and dedicate those to given WLAN networks.. I see now that this is not supported. Not inside the same network at least.
So, by reading further and consulting my best friend Google I learned about a setting called "AP Mode". Changing that from Local (the default) to H-REAP the APs should not route their traffic anymore through the management interface on the wireless controller, but instead route all the client traffic directly to the local LAN. This way you effectively remove the 100Mbit/s bottle-neck when all the APs were using the management interface both for configuration and client data traffic.
It seems you also have to enable H-REAP Local switching from a given WLAN network in addition to changing the AP Mode of your access points to H-REAP. I'm still in the testing phase here so should anyone have any insight to this, I'd be greatful to hear more.

Routers: What Are Jumbo Frames and why do I need them?

Some routers' specs specifically mention that they handle jumbo frames (with a number like 9K). I have a network with 2 iphones, two ipads, 4 computers, two networked Blu-Ray players, and 3 computers, all of which are operating simultaneously a lot of the time.
Some other companies seem to be using the fact that they support jumbo frames as part of their selling points. How do they help?
I asked Cisco Chat support about the RVS4000 and whether it supported them on both the WAN and the LAN. They said not on the WAN. They also said "
It appears under the L2 Switch tab you can input a Max Frame type.....
I don't see anything that actually says jumbo frames but I believe you can put in a value.....
after the device is setup you can navigate to the L2 Switch option and it has a Max Frame value"
I'm not sure whether this router supports jumbo frames or not. I have a short list of wired gigabit routers that I'm considering for purchase and the RVS4000 is on the list.
I need to learn more about this topic so any help or pointers to stuff to read would be greatly appreciated.

Thanks so much for the info. I read virtually all of it. The Jumbo Frames thing sounds very tricky - and possibly detrimental. I'll have to see if Time Warner Roadrunner supports them and at what sizes. Other than for really big file transfers between machines on my network (which I don't do that often) it sounds like jumbo frames isn't going to do much for me.
It also looks like the RVS4000 is not what I want. The smallnetbuilder review was a very useful one-although it's 4 yrs old, it's still likely mostly valid.
I do some gaming at times and it sounded like the adjusting of frame sizes until all the devices in the path are the same can cause unacceptable latency. Now it seems that no matter which gigabit router I choose, I need to be sure I get one where I can disable the major frames process, and maybe enable it when I want to do hard drive backups across the network. Welcome to the gigabit ethernet world I guess.
The RV220W sounds like a nice machine, but is a lot more machine than I think I need for my network. I read a very detailed review of it on Amazon at: http://www.amazon.com/gp/cdp/member-reviews/A2BBGBR6ARRJQO/ref=cm_pdp_rev_more?ie=UTF8&sort_by=MostRecentReview#R2SCJUQOKY7EN
It also sounds like it's more complex to set up than I would like to tackle. I'm a retired electrical engineer but definitely not a skilled IT person, so plug and play simplicity is important. I understand just enough to get in trouble.
Thanks again for the links. Much appreciated.

Linksys SE2800 and jumbo frames

Does the Linksys SE2800 gigabit 8 port switch support jumbo frames? Anyone have this switch? Any issues? Looking to replace a netgear gigabit switch that likes to forget that it has gigabit machines connected to it.

Hi Michael,
Actually had a chat with a colleague at linksys regarding your question, but he referred me to a datasheet, which left me with the question I started with. The technician said yes it suppported Jumbo frames but he could post me nothing in black and white..
Why not look at the Cisco Small Business umnanaged product the SG100D-08. It offers as the datasheet suggets;
Peace of mind:
All Cisco 100 Series switches are protected for the life of the product by the Cisco Limited Lifetime Hardware Warranty
Also, even though an unmanaged product, this series supports such features as;
1. Green Energy—Efficient Technology
The Cisco SG 100D-08 switch supports Green Energy-efficient
Technology. It can enter sleep mode, turn off unused ports, and adjust
power as needed. This increases energy efficiency to help businesses use
less power and save money.
2. Jumbo Frame Support
The Cisco SG 100D-08 switch supports frames up to 9,000 bytes called
jumbo frames. Jumbo Frame support improves network throughput and
reduces CPU utilization during large file transfers, such as multimedia files,
by allowing larger payloads in each packet.
regards Dave

Ports management in Solaris 10 Zones

Hi,
I am new in this area. We have a software vendor who stated that their applications should be able to:
- open TCP connections to ports in the ranges 21400-21404 and 50000-50199 on the server
- telnet port 23 for Galaxy 2000, http port 80 for Viewpoint (Server); etc.
- IngresNet is on listen address I3 (port 21400).
We have a Server & Storage infrastructure policy of implementing all Unix based applications on Solaris 10 Zones clustered on two nodes.
Will there be a problem with the vendor requests?. To me, it is about independent port management within Solaris 10 zones
Thanks in advance.

Does this imply there are no ports which are common/shared between the Global and local zones.
If there are, does it mean that opening one in that group of ports in the local zone will automatically implied its equivalent in the global is also opened?

SG 300-28 Switch - Jumbo Frames Problem.

I just got the SG 300-28 28 port switch tonight and got it up and running however, i've encountered a problem regarding jumbo frames. In the documentation and product brochures, it states the SG 300 switches supports jumbo frames up to 10k. When I first setup the switch and enabled jumbo frames, i was getting very slow speeds in my network transfers (800kb/s !!!). All the workstations are running Intel PCIE nic cards with jumbo frames enabled at 9014 bytes. After some troubleshooting, i lowered the frame size to 4088 bytes and everything returned to normal with fast speeds.
I had a suspicion that it might be the switch that is causing the network slowdown with 9k frames; I went ahead and enabled the 9k jumbo frame settings on my NICs again and started to ping other workstations on the network using the "don't fragment" flag. It turns out, the largest packet that i can send out is 8972 bytes. This is a little far from 10k frames that is stated in the documentation and brochures. Please correct me if i'm wrong, but it seems that i've stumbled into a bug in switch.
Time for a firmware update?

Hi Dickson C,
Interesting query.. TCP, UDP and ICMP packet overhead are fairly negligible according to the information below i would think about 94 bytes for ethernet plus tcp overhead.
The switch would internally label the ethernet frame to identify what VLAN the frame is in (even Vlan 1), so an extra 4 bytes would be used within the switch for that.
Ethernet frame format:
6 byte dest MAC addr
6 byte src MAC addr
[4 byte optional 802.1q VLAN Tag]
2 byte length/type
46-9014 byte data (payload)
4 byte CRC
Ethernet overhead bytes:
12 byte intergap + 8 preamble + 14 header + 4 trailer = 18 bytes/packet w/o 802.1q
12 byte intergap + 8 preamble + 18 header + 4 trailer = 22 bytes/packet with 802.1q
TCP encapsulated in Ethernet:
Assuming no header compression (e.g. not PPP)
Add 20 IPv4 header or 40 IPv6 header (no options)
Add 20 TCP header
Add 12 bytes optional TCP timestamps
TCP overhead can be 52 bytes
Ethernet + TCP overhead around 52+22 bytes = 74 bytes
Your Intel ethernet NIC supports around 9500-byte, so the datasheets from intel suggest for a jumbo frame , but you have it enabled at 9014 bytes.
So your NIC enabled at 9014 bytes - 74 bytes for Ethernet and TCP packet overhead= approximately 8940 bytes of data.
You say you are getting packet data throughput around 8972 bytes.
Check my maths, I have made a few assumptions. What you reckon, worth a call to the Small Business Support center to double check, please open a case and report back with the results. I really may be way off in some of my assumptions.
regards Dave
http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html

Button to load only a few frames within the timeline

I am new to AS3 and was doing a little bit of research before diving in.
I wish I could just create external swfs to load with each button, but the CMS system that I am uploading to won't allow it~
so I HAVE to make the thing into one swf, but the file size is too large.
Is it possible to make a button that loads only a few frames within the timelime? and the next button will load another few?
this is what i found and it says i can't:
http://stackoverflow.com/questions/791422/how-to-stop-flash-file-swf-from-loading-actionsc ript-3

loading a swf file is an all or none issue. once you start loading a swf, you can't stop it from proceeding to a complete load unless you unload the entire swf.

How do I get from Branded Zones to "real" Solaris 10 Zones?

My head is beginning to spin! I am beginning to think I have been led down a blind alley.
We have vast numbers of old Solaris 8 systems that we want to consolidate on new hardware in Solaris 10 Zones. We have been bombarded with advice that the way to go is to move it first to Branded Zones, as a stepping stone, and then migrate/upgrade it from there to Solaris 10. So we have started on our journey.
We now have our first bunch of Solaris 8 containers happily installed and running. And yes, it was relatively easy and painless, and the tool support was good. But now what? What are the steps and tools that will make the second step, from Solaris 8 to Solaris 10?
Everything out there hints that it is supposed to be easy. But every time I try and spec out the steps for our teams to follow I come unstuck. Does Live Upgrade feature in this anywhere? (And if so, at what point does my zone lose its Brand identity?) Is there some way to use archives? (And if so, how do I only include the bits I need to move?) Is there something magic under the covers of the Zone administration commands? (And if so, what pulls in my Solaris 8 stuff?) Is there at least some tool somewhere that will capture the configuration I need and build me a new one?
If the answer is that I just define the new Zone by hand and re-install all my applications from scratch, then can somebody explain just what I have achieved so far, and in what way it can be construed as a "stepping stone"?

Correct. But we have now invested in the time taken to learn about Branded Zones, do the migrations, teach the support teams how to manage them... Plus we are paying the subscription for the Branded Zone software. And we still have pure Solaris 8 applications staring end-of-support in the face. We could have made the same investment to re-install the applications in a real Solaris 10 Zone and make them work "properly". All the publicity tells me I've made my migration to Solaris 10 much easier, but I still can't see how I'm any nearer my end point.Here's where your losing it. There is no real distinction between what you call a normal Solaris 10 zone and a Solaris Branded 8 zone. They could have called it something else and you would still insist that somehow one is normal and one is not. There are a variety of Branded Zones. There's a Solaris 8, Solaris 9, and Linux Branded Zones. They differ from what you call "normal" zones in that you basically are adding an OS to the Base OS and are not just copying files from the Base OS. That's the only difference. In all other respects they are the same. The only differentiators is for a Branded Zone you are adding the files from some other OS, even if it's just an earlier version of Solaris.
How do you migrate from a Solaris 8 zone to a Solaris 10 zone. The same way that you moved from the Solaris 8 physical box to the Solaris 8 branded zone. The steps should be the same. Implicite_Order pretty much said the same thing.
You seem to have a hang up on the words "normal zone." Yea I know, you've spent time and money and educated everyone and now your looking for the payoff. As I already stated and has been echoed by I_O, contact the vendor to see if they have Solaris 10 support, if they do, create a zone on a dev box, do some testing, and then create the zone on the real box, do the install, migrate the data. Just as you already did from the Solaris 8 box. If they don't have a Solaris 10 specific version you can still setup a test box, create a "normal" zone, install the app and some test data, make sure it works, and then create the "normal" zone, install the app, migrate the data, and relax.
alan

Jumbo Frames within Solaris 10 zones and multiple interfaces...

Similar Messages

Maybe you are looking for