Solaris 10 x86 ipfilter aggr problem

Hi, all.
I have Solaris 10 x86 machine
Kernel Patch: 142910-17
IP patch: 143593-05
The problem shortly:
I am using two network LACP interfaces
aggr125030 contains e1000g1 interface
aggr150031 contains e1000g2 interface
Aggregation 31 was created by:
dladm create-aggr -P L3 -l active -T short -d e1000g2 31
and works fine.
If I add policy based routing rule:
pass out quick on aggr125030 to aggr150031:y.y.y.y proto tcp from x.x.x.x/32 to any port = 25 keep state
traffic matches the rule (it is observed through ipfstat -inohv command) but the rule doesn't work.
How did I decide? I have also ipnat rule
map aggr150031 <skipped>
so if PBR works, the ipnat rule is working too.
If I remove the second aggregation interface aggr150031 and pass the physical interface explicitly, the rule works:
pass out quick on aggr125030 to e1000g2:y.y.y.y proto tcp from x.x.x.x/32 to any port = 25 keep state
as well as the ipnat's one.
x.x.x.x is IP address of e1000g2 interface (or aggr150031)
y.y.y.y is IP address of router for x.x.x.x IP address
It seems that PBR for Ipfilter doesn't support aggregation interfaces for outbound.
Also if you combine vlans 125 and 150 withing one LACP (aggr150031 is replaced by aggr150030 and one physical interface is used for both vlans trunking), the PBR rule doesn't work too.
What shall I do?

The problem was caused by the ipfilter behavior - ignorance of interface alias. My ipnat rule was:
map aggr150031:1 ...
I have changed into:
map aggr150031 ...
and the things began to work.
Sorry for the noise.

Similar Messages

Solaris 10 x86 jumpstart patch problem

I'm trying to jumpstart and deploy the patch using the profile file(classfile). I does work well on the sparc however I seem to have an issue with x86. The line in profile file looks like this
patch patch_order nfs server1:/patch/10_x86
patch patch_order nfs server1:/patch/10_x86/10_x86_Recommended
The same directory "patch" is shared for sparc and x86 and all directory have the same permission.
Every time I jumpstart, I get this error message
Installing patches now
ERROR: Could not mount server1:/patch/10_x86 for patch install
ERROR: Could not mount server1:/patch/10_x86/10_x86_Recommended for patch install

The problem was caused by the ipfilter behavior - ignorance of interface alias. My ipnat rule was:
map aggr150031:1 ...
I have changed into:
map aggr150031 ...
and the things began to work.
Sorry for the noise.

HP ProLiant DL360 G4 Solaris 8 x86 Intel Install Problem

For some reason, solaris 8 does not see the disk, constantly get an error of No Disk, make sure its cabled and powered on. Right now , win 2003 server is installed and runs fine. Any ideas on how to get this working? It appears maybe a driver isnt installed.

Ok, here is the process. the solaris version is 8, date is 7/01
I boot up with the install cd 1 of 2.
View image: 1
Booting up here
View image: 2
From here, I choose F4 Add Driver
View image: 3
I insert the DU diskette and choose continue
View image: 4
Driver loading up into memory
View image: 5
DU Diskette removed and hit continue (Also kept it in just in case, but with same negative results)
View image: 6
Driver appears to be loaded in memory, chose continue
View image: 7
System scan started
View image: 8
Scan complete, chose continue
View image: 9
Error, Missing primary disk. Chose continue
View image: 10
Boot device selection screen
View image: 11
If disk is chosen, ERROR Cannot mount, so CD ROM is chosen instead.
View image: 12
Installation starts
View image: 13
Interactive install chosen as per HP, hangs at this screen for about 20 min, then the server reboots and the process starts all over again.
View image: 14

Solaris 10 x86 JDS login problem

Greetings,
After working flawlessly for a week or so, I suddenly am unable to log in to JDS. After I enter my login information, the screen goes blank, an hourglass icon appears, and then I am kicked back out to the dtlogin display. I can log in with CDE just fine.
This happens with root, my user account, and a brand new user account I just created. All the permissions on my home directory are fine (and I did a chown -R of everything, just to be safe). This happens both with Xorg and Xsun. I also tried rebuilding the font cache, as an earlier post on this forum had suggested that.
I originally had thought it might have been a patch problem, but I backed out of every JDS and X patch, and I still can't log in.
There are no error messages in the Xorg logs or any of the files in /var/adm or /var/log.
I'd greatly appreciate any help or pointers you all might have. Thanks muchly!

This is likely to be totally unrelated to your problem but I can't help wonder. And perhaps you may pick up something usefull to debug your problems...
I have seen this behaviour a few times on KDE. After carefully checking it turned out that some of its datafiles (in ~/.kde) were setup with the wrong permission bits thus making it impossible for me to read/write it (and automaticly overwrite). Now I can't help wonder if this isn't happening to you too, in some issues KDE and Gnome act quite alike.
A possible option to debug this would be to try and start the Java Desktop from the console. To this end you'd need to put the commands needed to start JDS in your ~/.xinitrc file after which you should be able to use 'startx' to see if it'll run. Make sure you use > and 2> to capture the logs it produces since that will likely help you to find the cause of your problems.

Installation problem sun solaris 9 x86 on intel

I am trying to install sun solaris 9 x86 intel platform edition on my home pc hp e-vectra, configuration is PIII 800 Mhz, 10 GB HDD, 128 MB Ram, 17" color monitor, but it giving me following error :-
BooT Panic: trap type e, error 0 at 117499
Cr0: 800000011, cr1: 4, cr3: 17e000
Eax: 0, ebx: 7e2c, ecx: 0 edx: 16e350
Es: fffffffe, edi: 17dfe0, ebp: 7e40, esp: 7e20
Entering boot debugger:
Please help me, how can I install sun solaris 9 x86 on my HP E-Vectra PC.
Kalpesh Mehta

I had similar problems several months ago. I suspect this happens when host pc does not have floppy drive(or bios somehow misreports it) as it was in my case. Solaris 8 seems to work fine in the same environment, so I keep using it for now. Possible workaround might be to use DCA from Solaris 8: Installation of Sol9 started just fine after I entered Sol8 DCA and asked it to boot from Sol9 CD.
Hope this problem will be fixed in subsequent Sol9 releases.
Victor

Several mysterious problems with Solaris 11 x86 install

Hi folks,
I've recently installed Solaris 11 x86 as a replacement for Solaris 9 SPARC on an Ultra 2 machine. I like the operating system, but I've promptly acquired some mysterious problems. The computer is a Fujitsu Siemens Esprimo E2500 with a Pentium 4 HT 3.06 GHz processor, 2 GB RAM, an 80 GB SATA disk and a 147 GB SCSI disk.
I have had a few occasions on which the screen goes totally blank, the monitor claims that there is no signal, and I have to restart the machine. However, with the blank screen, the hard drive activity light is sometimes still flashing. This happens predictably when I try to log off (as opposed to shutting down) and when I use Totem media player and click on anything inside the Totem window. The motherboard has built-in graphics and brief specifications can be found here:
http://uk.ts.fujitsu.com/rl/servicesupport/techsupport/professionalpc/ESPRIMO/Datasheets/ds_esprimo_edition_e2500.pdf
Yesterday my PS/2 keyboard started causing the motherboard to beep crazily when I use it. It beeps rapidly 4 times, then prints the expected character. However, the problem doesn't occur at the initial log in screen. The mouse cursor has also gone beserk on one occasion, flying all over the screen (I had this problem with a previous PC, but a different OS, and thought it was a hardware fault, which I why I got this new computer). With the keyboard problem, the machine is basically unusable. However, it is configured as a dual boot machine, and the keyboard problem isn't present with Windows XP.
There are also a few smaller, odd problems. Occasionally all the icons vanish from my Gnome desktop. The command prompt also mysteriously changed from $chris@pluto to $bash-4.1 just before the keyboard problem appeared, although that might have had something to do with me copying my home directory to a different disk and editing the /etc/auto_home file (moving the home directory worked fine). Also, unlike with Solaris 9 SPARC, I find that I have to have external SCSI devices switched on at boot time, should I want to use them later. That's a pain. With Solaris 9, I could run "boot -r" when I first attached the device, then switch on the SCSI devices and mount them whenever I wanted.
After the useful advice I received here about "more" and "less", I thought I'd post these problems and see if anyone can help. I'd really appreciate some advice. Can anyone identify likely causes for these problems? Which problems can I expect to solve and which do I have to live with?
Many thanks,
Chris Tidy
Edited by: Chris Tidy on 23-Mar-2012 03:36

Hi folks,
I've recently installed Solaris 11 x86 as a replacement for Solaris 9 SPARC on an Ultra 2 machine. I like the operating system, but I've promptly acquired some mysterious problems. The computer is a Fujitsu Siemens Esprimo E2500 with a Pentium 4 HT 3.06 GHz processor, 2 GB RAM, an 80 GB SATA disk and a 147 GB SCSI disk.
I have had a few occasions on which the screen goes totally blank, the monitor claims that there is no signal, and I have to restart the machine. However, with the blank screen, the hard drive activity light is sometimes still flashing. This happens predictably when I try to log off (as opposed to shutting down) and when I use Totem media player and click on anything inside the Totem window. The motherboard has built-in graphics and brief specifications can be found here:
http://uk.ts.fujitsu.com/rl/servicesupport/techsupport/professionalpc/ESPRIMO/Datasheets/ds_esprimo_edition_e2500.pdf
Yesterday my PS/2 keyboard started causing the motherboard to beep crazily when I use it. It beeps rapidly 4 times, then prints the expected character. However, the problem doesn't occur at the initial log in screen. The mouse cursor has also gone beserk on one occasion, flying all over the screen (I had this problem with a previous PC, but a different OS, and thought it was a hardware fault, which I why I got this new computer). With the keyboard problem, the machine is basically unusable. However, it is configured as a dual boot machine, and the keyboard problem isn't present with Windows XP.
There are also a few smaller, odd problems. Occasionally all the icons vanish from my Gnome desktop. The command prompt also mysteriously changed from $chris@pluto to $bash-4.1 just before the keyboard problem appeared, although that might have had something to do with me copying my home directory to a different disk and editing the /etc/auto_home file (moving the home directory worked fine). Also, unlike with Solaris 9 SPARC, I find that I have to have external SCSI devices switched on at boot time, should I want to use them later. That's a pain. With Solaris 9, I could run "boot -r" when I first attached the device, then switch on the SCSI devices and mount them whenever I wanted.
After the useful advice I received here about "more" and "less", I thought I'd post these problems and see if anyone can help. I'd really appreciate some advice. Can anyone identify likely causes for these problems? Which problems can I expect to solve and which do I have to live with?
Many thanks,
Chris Tidy
Edited by: Chris Tidy on 23-Mar-2012 03:36

"/network/physical:default" problem in Solaris 10 x86

I have a problem with network interface on Solaris 10 x86 on HP Proliant ML 370 G4 server.
The problem is that at the boot time it report some problem with network interface and writes "see svcs -x"
# svcs -x
svc:/network/physical:default (physical network interfaces)
State: maintenance since Mon 21 Mar 2005 09:55:39
Reason: Start method exited with $SMF_EXIT_ERR_CONFIG.
See: http://sun.com/msg/SMF-8000-KS
See: ifconfig(1M)
See: /etc/svc/volatile/network-physical:default.log
Impact: 5 dependent services are not running. (Use -v for list.)
svc:/application/print/server:default (LP print server)
State: disabled since Mon 21 Mar 2005 09:55:38
Reason: Disabled by an administrator.
See: http://sun.com/msg/SMF-8000-05
See: lpsched(1M)
Impact: 2 dependent services are not running. (Use -v for list.)
svcs -v shows that /network/physical:default need maintance
# ifconfig -a
lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
inet 127.0.0.1 netmask ff000000
# svcs -xv /network/physical:default
svc:/network/physical:default (physical network interfaces)
State: maintenance since Mon 21 Mar 2005 09:55:39
Reason: Start method exited with $SMF_EXIT_ERR_CONFIG.
See: http://sun.com/msg/SMF-8000-KS
See: man -M /usr/share/man -s 1M ifconfig
See: /etc/svc/volatile/network-physical:default.log
Impact: 5 dependent services are not running:
svc:/milestone/network:default
svc:/network/nfs/nlockmgr:default
svc:/network/nfs/client:default
svc:/network/nfs/status:default
svc:/network/ssh:default
# more /etc/svc/volatile/network-physical:default.log
[ Mar 21 09:55:37 Enabled. ]
[ Mar 21 09:55:38 Executing start method ("/lib/svc/method/net-physical") ]
[ Mar 21 09:55:38 Timeout override by svc.startd. Using infinite timeout ]
ifconfig: plumb: eri0: No such file or directory
moving addresses from failed IPv4 interfaces: eri0 (couldn't move, no alternative interface).
[ Mar 21 09:55:39 Method "start" exited with status 96 ]
I have not any eri device in /dev directory
How can I add a network interface?

Try elxl0 :-) This is: E L X L - zero :-) instead of: qfe0.
PS The 0 can increase to 1,2,.. if you have more 3com cards in the system.

Solaris 8 x86 w/ Seagate 410800N Drive - Size Detection Problem

I have a Dual PII-300Mhz computer w/ 786MB memory and a 4.5GB Wide Scsi (Seagate) and an 8.1GB Narrow Scsi (Seagate - 410800N) configuration.
I have installed Solaris 8 x86 and applied the "recommended patches". The system is working great EXCEPT for when I attempt to format the ST410800N hard drive.
The # of cylinders is suppose to be 4925, heads 27, sectors per track 133, etc...
Solaris is detecting only ~467 cylinders and 26 heads. I've tried to change the "TYPE" to one that I created and it seems to work for a few menu selections, but then when I try to partition the drive, it shows only ~467-470 cylinders. It shows 9 slices and only allows me modify up to #7. The SCSI ID for the drive is 4, which I'm not sure if this is something that Solaris is reserving for a Tape drive. I can change it to 1 or 2.
Any advice would be greatly appreciated. I am new to using Solaris, but I'm enjoying it alot. I just would like to get this drive partitioned so that I can move "home" and to install Oracle 8.x
Thanks,
George

Thanks for all of the helpful responses. I figured out the problem.

Solars 10 x86 1/06 install problem - empty bootloader

Hi,
I'm trying to install 1/06 on a noname AMD X2, on a SATA disk. Had the previous version installed without problems, but 1/06 wouldn't show any options in GRUB. After booting from DVD, GRUB shows me the version number, no options to choose from, and the GRUB prompt. Tried on different machines the same on all.
Any help would really be appreciated.
cheers
cray

Looks like Solaris 10 x86 1/06 GA has got an issue with GRUB. I've downloaded Solaris Express (nv-b27a) CD-isos, now GRUB & the installation are working fine. Just wondering if I was the only one having this issue (as I've tested it on 3 different machines and on VPC it most likely wasn't a HW-issue).
Cheers
cray

Solaris 10 x86 64-bit wireless connection problem

I installed Solaris 10 x86 32-bit on my laptop together with Fedora 10 (Linux) and Windows XP.
When I boot up Fedora 10 and WinXP, these two OS are able to find the wireless driver automatically, but Solaris 10 failed.
When I do prtconf -pv, I saw my wireless card is listed in the output.
So I update the /boot/solaris/devicedb/master and /etc/driver_aliases with my wireless card id - pci168c,001a
Then do sys-unconfig and reboot
But after reboot, Solaris still only tries to configure the ethernet card (NIC) rather than checking out the wireless connection.
I think this might be a design flaw for Solaris 10. If it runs on x86, most users would have wireless connection, not just land line connection.
Does anyone here have a solution for this problem?
Thanks a lot!

I assume that when solaris 10 boots up, it only checks the land line NIC card, not the wireless card. If there is no lan connection, then so be it.
Is that right?No! :-)
nwam only supports one device but the device is selectable. physical should activate all devices regardless. So if your Wifi isn't working then I would use wificonfig to see what it can see. Check the man page for scan and showstatus options. Then you'll know what it's seeing.
alan

Fresh solaris 10 x86 install patch update problems 119060-17 ...

Just yesterday, i installed a fresh Solaris 10 x86 onto some pc hardware. After getting solaris installed and issues with my network card, i downloaded and installed the free version of the update manager 1.0.x. Next, i proceeded to update all the general patches for the solaris 10 system. I started with the command 'pprosvc -i' from a terminal. It then proceeded to download and validate a bunch of patches successfully until it hit the following 3 patches:
119060-17 ---- X11 6.6.2_x86: Xsun patch
122213-10 ---- GNOME 2.6.0_x86: GNOME Desktop Patch
122912-02 ---- SunOS 5.10_x86: Apache 1.3 Patch
All 3 failed some kind of validation and then crashed the pprosvc program, at which point it exited with the following error:
122912-02 cannot be validated
119060-17 cannot be validated
122912-02 cannot be validated
Unexpected Failure: java.lang.Throwable: ERROR: Failed to validate the digital signature(s).
I also tried to use the GUI Update Manager to update, hoping the problem was isolated to pprosvc, but that problem was also in the GUI with a similar error message:
Error occurred...The detailed error message is: Unexpected Failure: java.lang.Throwable: ERROR: Failed to validate the digitial signature(s)
Anyone know why Sun's update patch process is so troublesome?
Getting Tired of Solaris Updates...
I should mention that this is the free solaris 10 x86 install and i don't have a service contract with Sun. If this problem persists, i don't think i'll get one, as i see only further problems after buying one.
tired and confused

Hi,
There is an issue with this that is currently being investigated. There is another thread that may shed some light on what is happening here;
http://forum.sun.com/jive/forum.jspa?forumID=316
Thread title is : Sun UC, Digitally Signed Patches Using New Verisign Certificates
In the short-term please ensure that the patch mentioned in it is installed.
To quote part of mentioned thread above:
"Once the Sun Update Connection client software is upgraded with patch 121118-06 (SPARC) or 121119-06 (x86/x64) or later revisions normal behavior will resume. "
If this fails to resolve your problem, would you be kind enough to post the output of the following command for analysis please;
# showrev -p | egrep -e '121454|121119|120336|121082|121564|122232|119789'
Sincerely,
Moderator.
Message was edited by:
ForumModerator

StarOffice 8 U6 (Solaris 10 x86) problem upgrading to U7

hello all,
i have problem installing the new StarOffice 8 U7 patch (120186-11) on Solaris 10 x86 3/05. my current installation of StarOffice 8 is patched up to U6 (120186-10) and has the "ARCH patch to enable install of >= Update 6" patch 126411-01 installed.
the errors that i get from patchadd are:
Architecture for package SUNWstaroffice-core01 from directory SUNWstaroffice-core01.i in patch 120186-11 differs from the package installed on the system.
<snipped other output>
0 Patch 120186-11 is declared as incompatible by 122365-01, which has already been installed on the system.
any help will be appreciated.
greetings,
Stoyan

hello all,
finally found the solution for this problem. thanks to Willi Burmeister who posted a simiral question and a summary to the sunmanagers mailing list:
this was triggered by bug 6404527. It's a missing blank in the pkginfo file of nearly all
staroffice packages.
here is a quick workaround:
# cd /var/sadm/pkg
# grep -l ": R" */pkginfo | xargs perl -pi'.bak' -e 's/: R/: R/'i am happily running U9 now :P
cheers,
Stoyan

Solaris 10 x86 intallation problems

I have an athlon based machine which was happily running XP this morning. I had previously divided the disk to use a Linux distribution on one half and XP on the other. I wanst using the Linux bit much due to graphics driver problems so I decided to replace it with a Solaris 10.
I duly went through the installation and was told that the solaris boot loader was incomaptible with the Linux one, grub I think, so I overwrote it and proceeded with the install. During the disk layout procedure I asked it to preserve my XP partition and use the rest for solaris. I had to shrink the solaris bit beyond teh full size by 100k or so and eventually it was happy, or so I thought.
Solaris is now duly installed and runs fine. I just need to sort out a network card driver. However my problem is that the sun boot loader sees the old XP partition as an extended dos partition (partition 3) and wont boot from it....
WHat have I done wrong?
Please dont tell me my XP partition is lost! Is there some tool I can use to make it bootable again? I have seen the grub bits on the GNU site. Are these any use?
All Help gratefully recieved.

FYI: I tried yet another version of solaris as i found out that theres a bug in the 64-bit kernel on update 4 for alot of new processors. Solaris 10 x86 update 7 did the trick! :). Installed right away on a standard 'Solaris 10 (64 bit)' VM. I still find it strange that the most recent version of solaris 10 fails to even start the installation.

Gcc problems on Solaris 10 X86

I'm using Solaris 10 x86 and gcc from /usr/sfw/bin and have come across a couple of problems:
which gcc
/usr/sfw/bin/gcc
gcc -v
Reading specs from /usr/sfw/lib/gcc/i386-pc-solaris2.10/3.4.3/specs
Configured with: /builds/sfw10-gate/usr/src/cmd/gcc/gcc-3.4.3/configure prefix=/usr/sfw with-as=/usr/sfw/bin/gas with-gnu-as with-ld=/usr/ccs/bin/ld without-gnu-ld enable-languages=c,c++ --enable-shared
Thread model: posix
gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath)
Problem 1
cat ll.cc
#include <signal.h>
int CS;
gcc -c ll.cc
ll.cc:2: error: expected unqualified-id before numeric constant
ll.cc:2: error: expected `,' or `;' before numeric constant
CS is defined in the file /usr/include/sys/regset.h as:
#define CS 15
I've changed the code to use MYCS instead and this gets around the problem. Does anyone have a more elegant solution to the problem?
Problem 2
In a g++ compilation I have a file that includes cpp_type_traits.h.
The compilation fails with:
/usr/sfw/lib/gcc/i386-pc-solaris2.10/3.4.3/../../../../include/c++/3.4.3/bits/cpp_type_traits.h:69: error: expected unqualified-id before "namespace"
The relevant line in cpp_type_traits.h is:
namespace __gnu_internal
Knowing rather little about g++ I've been Googling for an hour but not found anyone else with the same problem.
Many Thanks
Andy

I'm not fully sure what might cause your problems since I'm not a programmer myself. However, I do wonder if the gcc version located in /opt/sfw/bin may do you some good. When all other options fair I'd recommend getting the Studio 11 package and just use the cc compiler provided by Sun themselves. Its free anyway.

Problems with Solaris Web Console on Solaris 10 x86

I recently installed Solaris 10 x86 (10/08 release) on a Sun x4450.
I have installed the Jan 14, 2009 patch cluster.
I was having some problems connecting to the Web Console to do some ZFS administration. That's when I installed the patch cluster.
After the patch cluster install I couldn't connect at all. This problem was resolved here: http://forums.sun.com/thread.jspa?threadID=5249136
Now when I login to the Web Console I get a message that says:
"+No application is registered with this Sun Java(TM) Web Console, or you have no rights to use any applications that are registered. See your system administrator for assistance.+"
I'm logging in as root, so it shouldn't be a rights issue.

Quick Solution to the problem you are facing
How to configure ZFS Webconsole Administration
run this command
wcadmin deploy -a zfs -z zfs /usr/share/webconsole/webapps/zfs
you should be able to see & Manage ZFS in Applications area of webconsole.
Enjoy ! Cheers

Solaris 10 x86 ipfilter aggr problem

Similar Messages

Maybe you are looking for