Help with 2.6 and multiple IP addresses

Hello,

        Sorry about the delay in response but I was trying to find the patch

number before I posted the replies. Many thanks to Ade Faleti, Skye Poier, and

Frank Cusack. Apparently this is a known bug in 2.6. My Sun rep has not giving

any patch info yet, so if anyone knows a patch ID I would appreciate it. Thanks

guys.

Rob.

        

>Hi,

>

> We have an Ultra 2 running Solaris 2.6 with multiple IP addresses

>in the same subnet bound to a single interface, hme0. We want the primary

>IP address of this machine to be the first one bound to the card. The

>rest of the IPs have been setup to service virtual hosts. This machine

>needs to have access to an nfs mount through the primary IP address but

>not through the other ones, so we setup mount restrictions on the server

>limiting access to our primary IP addresses on all of our virtual host

>servers. This setup works fine on Solaris 2.5.1. After setting up the

>virtual host interfaces on 2.6 we ran into the problem that any outgoing

>IP connections from the machine would cycle through all of the addresses

>that where bound to the card instead of just using the primary ip address

>as their source address. I used ndd to set ip_enable_group_ifs to false

>and thought I fixed the problem. Now, all ip and tcp services behave as

>they do under 2.5 as far as I can tell, but udp (namely rpc) services

>instead of using the primary IP address on the card uses the last IP

>address bound to the card as their source address. Do this make any

>sense? Can anyone explain to me the changes they made to 2.6 that causes

>this behavior?

>

>Thanks,

>Rob.

_______________________________________________________________________

Robert Bays robert@ironlight.com

Ironlight Digital phone: (415) 646-7000

222 Sutter Street Sixth Floor

San Francisco, CA 94108

_______________________________________________________________________

[2635 byte] By [CodeProf.com] at [2007-12-25 11:59:00]