Stuart,
Attached are my notes on how to configure link-based (not probe-based)
IPMP for Solaris 10. There is nothing special that you have to do
with ipfilter other than create rules for both interfaces, eg bge0
and bge1.
Jeff Earickson
Colby College
On Wed, 29 Nov 2006, Stuart Remphrey wrote:
Date: Wed, 29 Nov 2006 15:21:50 +1100
From: Stuart Remphrey <stuart.remphrey@rmit.edu.au>
To: ipfilter@coombs.anu.edu.au
Subject: IP Filter and IPMP on Solaris 10 (ipf 3.0.4, pfil 2.1.4)
G'day all,
Trying to get Solaris IPMP (IP MultiPathing) group recognised by IP
Filter,
using the ipf & pfil as supplied with Solaris 10 (currently 6/06).
I can define the IPMP groups as something like:
ndd -set /dev/pfil qif_ipmp_set ipmp0=ce0,ce1
(it seems names besides ipmp can also be used, such as "db", "web",
whatever)
Then see them with:
ndd -get /dev/pfil qif_ipmp_status
Now, am I supposed to then use "on ipmp0" in a rule, something like:
pass in log first quick on ipmp0 from X to Y port = 22 flags S keep
state
(or S/SA, S/SAFR, whatever)
Incoming SSH does not match this rule, but if I change to "on ce0"
it works as before (however then I'm concerned it may not track
the state across to ce2 if the link or switch on ce0 fails).
Rgds, Stuart.
Stuart Remphrey
RMIT ITS Infrastructure Services - Unix Systems
Phone (03) 992 55 070 (or extension 55070)
link.based.failover
Description: Text document
|