Solaris 10 zones, VLANs, IPMP

[vostrushka]

I would like to have two NICs in IPMP configuration and public connections tagged with VLANs.
I know the naming convention when 1 VLAN tag assigned to the physical NIC but I do not quite understand how to add multiple VLAN tags to one NIC and VLAN tags to pseudo interfaces.

Here is the configuration I have:

/etc/hostname.e1000g8
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-6 netmask + broadcast + failover up
/etc/hostname.e1000g9
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-7 netmask + broadcast + failover up
netmask + broadcast + group ipmpgroup4 deprecated -failover up addif sunsolaris10-12 netmask + broadcast + failover up

... and here how it looks like once configured:

e1000g8: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 13
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
groupname ipmpgroup4
ether 0:50:56:23:29:c8
e1000g8:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 13
inet 10.10.1.116 netmask ff000000 broadcast 10.255.255.255
e1000g9: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 14
inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
groupname ipmpgroup4
ether 0:50:56:24:f:2e
e1000g9:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.117 netmask ff000000 broadcast 10.255.255.255
e1000g9:2: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 14
inet 10.10.1.118 netmask ff000000 broadcast 10.255.255.255

Regards
Leonid

 

[tarn]

If I understand you correctly you want two interfaces e1000g8 and e1000g9 to work as an ipmp group so that when one fails the other takes over the float @IP (basically standard IPMP). I'm slightly confused by your comment about multiple VLANs ???

For IPMP grouped interfaces to work as a team they need to be in the same VLAN and to be correct its the @IP and netmask that is assigned to the interface that provides what VLAN they are in. Are you confusing GROUP name with VLAN?

The way I configure IPMP with 2 interfaces (2 test @IP's and a float @IP as members of the same group) is:

cat /etc/hosts

10.10.10.100 sunsolaris10
10.10.10.101 sunsolaris10_test_e1000g8
10.10.10.102 sunsolaris10_test_e1000g9

cat /etc/hostname.e1000g8

sunsolaris10 group ipmpgroup4 netmask + broadcast + up
addif sunsolaris10_test_e1000g8 netmask + broadcast + -failover deprecated  up

cat /etc/hostname.e1000g9

sunsolaris10_test_e1000g9 group ipmpgroup4 netmask + broadcast +  -failover deprecated  up

e1000g8: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 13
        inet 10.10.10.100 netmask ff000000 broadcast 0.255.255.255
        groupname ipmpgroup4
        ether 0:50:56:23:29:c8
e1000g8:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 13
        inet 10.10.10.101 netmask ff000000 broadcast 10.255.255.255
e1000g9: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 14
        inet 10.10.10.102 netmask ff000000 broadcast 0.255.255.255
        groupname ipmpgroup4
        ether 0:50:56:24:f:2e

And when you e1000g8 looses access to the gateway or fails for some reason it will look something like:

e1000g8: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER,FAILED> mtu 1500 index 13
        inet 0.0.0.0 netmask ff000000 broadcast 0.255.255.255
        groupname ipmpgroup4
        ether 0:50:56:23:29:c8
e1000g8:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 13
        inet 10.10.10.101 netmask ff000000 broadcast 10.255.255.255
e1000g9: flags=9040843<UP,BROADCAST,RUNNING,MULTICAST,DEPRECATED,IPv4,NOFAILOVER> mtu 1500 index 14
        inet 10.10.10.102 netmask ff000000 broadcast 0.255.255.255
        groupname ipmpgroup4
        ether 0:50:56:24:f:2e
e1000g9:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 13
        inet 10.10.10.100 netmask ff000000 broadcast 10.255.255.255

NOTE: this is all done from memory so exclude any mistakes in examples

Sorry if I've missed any point you were making.

Laurie.

 

[vostrushka]

If there is s need to assign VLAN tag to the NIC Solaris provides special naming convention for the NIC (it includes vlan tag). The problem is that it is simple to setup for the physical NIC, but for pseudo interface it does not work or I do not know how it should work. No, I am not confusing group with vlans it is about VLANs only.
Think of a situation when two physical NICs (configured in IPMP) give access to several zones. Each zone running with its own pseudo interface and potentially each zone can use different VLANs. The question is how to assign VLAN to pseudo interface.
Regards
Leonid

 

[tarn]

Indeed ... I had totally lost the plot, but been researching and I think you may find your answer here .....

http://docs.oracle.com/cd/E19253-01/816-4554/fpjve/index.html

not had time (and missing a Sol 10 server) to play with this config so good luck ..

Laurie.

 

[tarn]

or better still start from here

http://blogs.oracle.com/stw/entry/using_ip_instances_with_vlans

Laurie