- NIC 설치 및 IP 설정
1) ok 프롬프트에서 boor -r
2) dev에서 장치확인 or cat /etc/path_to_inst
-
Caution! This file contains critical kernel state
#
"/iscsi" 0 "iscsi"
"/pseudo" 0 "pseudo"
"/scsi_vhci" 0 "scsi_vhci"
"/options" 0 "options"
"/ramdisk-root" 0 "ramdisk"
"/pci@1f,4000" 0 "pcipsy"
"/pci@1f,4000/ebus@1" 0 "ebus"
"/pci@1f,4000/ebus@1/SUNW,envctrltwo@14,600000" 0 "envctrltwo"
"/pci@1f,4000/ebus@1/su@14,3083f8" 0 "su"
"/pci@1f,4000/ebus@1/su@14,3062f8" 1 "su"
"/pci@1f,4000/ebus@1/power@14,724000" 0 "power"
"/pci@1f,4000/ebus@1/se@14,400000" 0 "se"
"/pci@1f,4000/ebus@1/se@14,200000" 1 "se"
"/pci@1f,4000/ebus@1/ecpp@14,3043bc" 0 "ecpp"
"/pci@1f,4000/TSI,gfxp@4" 0 "gfxp"
"/pci@1f,4000/network@1,1" 0 "hme""/pci@1f,4000/scsi@3" 0 "glm"
"/pci@1f,4000/scsi@3/sd@6,0" 6 "sd"
"/pci@1f,4000/scsi@3/sd@8,0" 7 "sd"
"/pci@1f,4000/scsi@3/st@0,0" 2 "st"
"/pci@1f,4000/scsi@3,1" 1 "glm"
"/pci@1f,2000" 1 "pcipsy"
"/pci@1f,2000/pci@1" 0 "pci_pci"
"/pci@1f,2000/pci@1/SUNW,qfe@0,1" 0 "qfe"
"/pci@1f,2000/pci@1/SUNW,qfe@1,1" 1 "qfe"
"/pci@1f,2000/pci@1/SUNW,qfe@2,1" 2 "qfe"
"/pci@1f,2000/pci@1/SUNW,qfe@3,1" 3 "qfe"
3) ifconfig qfe0 plumb 192.168.10.1 netmask 255.255.255.0 broadcast + up //4port nic의 첫번째 포트를 사설 네트워크의 GW(192.168.10.1)로 설정
4) /etc/hosts 편집
# Internet host table
#
127.0.0.1 localhost loghost
192.168.0.139 boo boo.3stek.com loghost
192.168.10.1 boo1ipfilter.xmlipfilter.xml
5) cat /etc/hostname.hme0 // 이미 존재 없다면 생성
6) cat /etc/hostname.qfe0 생성
7) cat /etc/netmasks 편집 // 사설망 netmask 추가
# The netmasks file associates Internet Protocol (IP) address
# masks with IP network numbers.
#
# network-number netmask
#
# The term network-number refers to a number obtained from the Internet Network
# Information Center.
#
# Both the network-number and the netmasks are specified in
# "decimal dot" notation, e.g:
#
# 128.32.0.0 255.255.255.0
#
192.168.0.0 255.255.255.0 # 외부망 마스크
192.168.10.0 255.255.255.0 #사설망 마스크
8) cat /etc/resolv.conf // 보너스
2. IP forwarding 설정
routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding disabled disabled IPv6 forwarding disabled disabled
Routing services "route:default ripng:default"
Routing daemons:
STATE FMRI
disabled svc:/network/routing/legacy-routing:ipv4
disabled svc:/network/routing/legacy-routing:ipv6
disabled svc:/network/routing/ndp:default
disabled svc:/network/routing/rdisc:default
disabled svc:/network/routing/ripng:default
disabled svc:/network/routing/ripng:quagga
disabled svc:/network/routing/route:default
disabled svc:/network/routing/zebra:quagga
disabled svc:/network/routing/rip:quagga
disabled svc:/network/routing/ospf:quagga
disabled svc:/network/routing/ospf6:quagga
disabled svc:/network/routing/bgp:quagga
routeadm -u -e ipv4-forwarding // -u : 부팅 시 적용하라는 옵션, -e : enable 옵션(↔ -d : disable 옵션)
routeadm
Configuration Current Current
Option Configuration System State
---------------------------------------------------------------
IPv4 routing disabled disabled
IPv6 routing disabled disabled
IPv4 forwarding enabled enabled IPv6 forwarding disabled disabled
Routing services "route:default ripng:default"
Routing daemons:
STATE FMRI
disabled svc:/network/routing/legacy-routing:ipv4
disabled svc:/network/routing/legacy-routing:ipv6
disabled svc:/network/routing/ndp:default
disabled svc:/network/routing/rdisc:default
disabled svc:/network/routing/ripng:default
disabled svc:/network/routing/ripng:quagga
disabled svc:/network/routing/route:default
disabled svc:/network/routing/zebra:quagga
disabled svc:/network/routing/rip:quagga
disabled svc:/network/routing/ospf:quagga
disabled svc:/network/routing/ospf6:quagga
disabled svc:/network/routing/bgp:quagga
※ Solaris 9 이하에서는 ndd -set /dev/ip ip_forwarding 1 이라고 해준다.(Solaris 10에서도 먹히나 부팅 시 적용이 안되며, 부팅시 적용되는 스크립트에 넣어줘야 함)
3. IP Filter 설치 및 설정
1) pkginfo | grep Filter // Solaris 10의 경우 기본적으로 설치되어 있음.
system SUNWffiltersr foomatic-filters - Foomatic Print Filters (root)
system SUNWffiltersu foomatic-filters - Foomatic Print Filters (user)
system SUNWipfh IP Filter header files
system SUNWipfr IP Filter utilities, (Root)
system SUNWipfu IP Filter utilities, (Usr)
system SUNWmp MP Print Filter
2) 만약 설치되어 있지 않다면, http://coombs.anu.edu.au/~avalon/ 에서 Download.
(wget http://coombs.anu.edu.au/~avalon/ip_fil4.1.33.tar.gz 해도된다.)
3) /etc/ipf/ipnat.conf 생성
map hme0 192.168.10.0/24 -> 0.0.0.0/32
4) svcadm enable ipfilter
※ 소스를 다운로드해서 설치 시 smf manifest(ipfilter.xml) 및 메소드(ipfilter)가 같이 설치되지 않을수도 있기에 첨부해둔다. 설치방법은 Readme 파일 참고.
4. NAT 서버에 호스트 컴퓨터 연결 및 실행 확인
gateway 192.168.10.1
netmask 255.255.255.0
broadcast 192.168.10.255
IP는 192.168.10.1 ~ 254까지 사용가능
그리고 TEST 잘 들어가면 NAT 설치 성공!
이 글은 스프링노트에서 작성되었습니다.
