ce0: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu 1500 index 2
inet 10.162.212.132 netmask ffffff00 broadcast 10.162.212.255
ether 0:14:4f:55:82:9
ce1: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu 1500 index 3
inet 10.231.11.232 netmask ffff0000 broadcast 10.231.255.255
ether 0:14:4f:55:82:a
I want to access 10.231.0.0 network when I'm sitting behind 10.162.212. network
can someone please help me to use IPF on solaris-10.
Regards,
BB
just enable it... look for the right SMF (svcs -a | grep forward) and start it (svcadm enable ...).
enable what...
# routeadm -u -e ipv4-forwarding
# routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding enabled enabled
IPv6 forwarding disabled disabled
Routing services "route:default ripng:default"
Routing daemons:
STATE FMRI
disabled svc:/network/routing/legacy-routing:ipv4
disabled svc:/network/routing/legacy-routing:ipv6
disabled svc:/network/routing/ndp:default
disabled svc:/network/routing/rdisc:default
disabled svc:/network/routing/ripng:default
disabled svc:/network/routing/ripng:quagga
disabled svc:/network/routing/route:default
disabled svc:/network/routing/zebra:quagga
disabled svc:/network/routing/rip:quagga
disabled svc:/network/routing/ospf:quagga
disabled svc:/network/routing/ospf6:quagga
disabled svc:/network/routing/bgp:quagga
You need to specify either static or dynamic rule for updating routing tables so please look at
man routeadm
If you run IPv4 on your corporate network you must enable intranet forwarding using this service
svc:/network/routing/legacy-routing:ipv4
If you want use IPfilter to redirect traffic from some network card to other you can use rule set like this one
pass in on e1000g00 from 192.168.0.0/24 to 192.168.0.1
pass out on e1000g00 from 192.168.0.1 to 192.168.0.0/24
But to get more secure connection you can redirect by some port and include some encryption if your data must be classified.