Mai
7
ifconfig
Leave a comment »
Description
ifconfig est une commande très utilisé dans les systèmes Linux car il est l’équivalent du ipconfig de windows. Elle permet d’obtenir des informations sur les interfaces réseaux de la machine et surtout elle permet de configurer et gérer les interfaces réseaux. Sur Solaris elle est un peu particulière car elle ne fonctionne pas tout à fait comme sur un Linux. Comme on le verra dans l’exemple son fonctionnement est légèrement différent.
C’est donc une commande indispensable qu’il est nécessaire de maitriser. Il faut être root pour utiliser ces options avancées. Avec l’arrivée en fin d’année de Solaris 11 la commande ifconfig sera remplacé par ipadm
Le man étant plutôt long je vous encourage à utiliser la fonction de recherche de votre navigateur.
Exemple
root@solaris:~# ifconfig -a lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1 inet 127.0.0.1 netmask ff000000 e1000g0: flags=1004843<UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4> mtu 1500 index 2 inet 192.168.1.20 netmask ffffff00 broadcast 192.168.1.255 ether 8:0:27:f7:e3:54 lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1 inet6 ::1/128 e1000g0: flags=20002004841<UP,RUNNING,MULTICAST,DHCP,IPv6> mtu 1500 index 2 inet6 fe80::a00:27ff:fef7:e354/10 ether 8:0:27:f7:e3:54 root@solaris:~# ifconfig e1000g0 up root@solaris:~# ifconfig e1000g0 addif 192.168.1.21/24 Created new logical interface e1000g0:1 root@solaris:~# ifconfig -a lo0: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1 inet 127.0.0.1 netmask ff000000 e1000g0: flags=1004843<UP,BROADCAST,RUNNING,MULTICAST,DHCP,IPv4> mtu 1500 index 2 inet 192.168.1.20 netmask ffffff00 broadcast 192.168.1.255 ether 8:0:27:f7:e3:54 e1000g0:1: flags=1000842<BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2 inet 192.168.1.21 netmask ffffff00 broadcast 192.168.1.255 lo0: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1 inet6 ::1/128 e1000g0: flags=20002004841<UP,RUNNING,MULTICAST,DHCP,IPv6> mtu 1500 index 2 inet6 fe80::a00:27ff:fef7:e354/10 ether 8:0:27:f7:e3:54
Man solaris de la commande ifconfig
System Administration Commands ifconfig(1M)
NAME
ifconfig - configure network interface parameters
SYNOPSIS
ifconfig interface [address_family] [address [/prefix_length]
[dest_address]] [addif address [/prefix_length]]
[removeif address [/prefix_length]] [arp | -arp]
[auth_algs authentication algorithm] [encr_algs encryption algorithm]
[encr_auth_algs authentication algorithm] [auto-revarp]
[broadcast address] [deprecated | -deprecated]
[preferred | -preferred] [destination dest_address]
[ether [address]] [failover | -failover] [group
[name | ""]] [index if_index] [ipmp] [metric n] [modlist]
[modinsert mod_name@pos] [modremove mod_name@pos]
[mtu n] [netmask mask] [plumb] [unplumb] [private
| -private] [nud | -nud] [set [address] [/netmask]]
[standby | -standby] [subnet subnet_address] [tdst
tunnel_dest_address] [token address/prefix_length]
[tsrc tunnel_src_address] [trailers | -trailers]
[up] [down] [usesrc [name | none]] [xmit | -xmit]
[encaplimit n | -encaplimit] [thoplimit n] [router
| -router] [zone zonename | -zone | -all-zones]
ifconfig [address_family] interface {auto-dhcp | dhcp} [primary]
[wait seconds] drop | extend | inform | ping
| release | start | status
DESCRIPTION
The command ifconfig is used to assign an address to a net-
work interface and to configure network interface parame-
ters. The ifconfig command must be used at boot time to
define the network address of each interface present on a
machine; it may also be used at a later time to redefine an
interface's address or other operating parameters. If no
option is specified, ifconfig displays the current confi-
guration for a network interface. If an address family is
specified, ifconfig reports only the details specific to
that address family. Only privileged users may modify the
configuration of a network interface. Options appearing
within braces ({}) indicate that one of the options must be
specified.
DHCP Configuration
The forms of ifconfig that use the auto-dhcp or dhcp argu-
ments are used to control the Dynamic Host Configuration
Protocol ("DHCP") configuration of the interface. In this
mode, ifconfig is used to control operation of
dhcpagent(1M), the DHCP client daemon. Once an interface is
placed under DHCP control by using the start operand, ifcon-
fig should not, in normal operation, be used to modify the
SunOS 5.11 Last change: 6 Jul 2010 1
System Administration Commands ifconfig(1M)
address or characteristics of the interface. If the address
of an interface under DHCP is changed, dhcpagent will remove
the interface from its control.
OPTIONS
The following options are supported:
addif address
Create the next unused logical interface on the speci-
fied physical interface.
all-zones
Make the interface available to every shared-IP zone on
the system. The appropriate zone to which to deliver
data is determined using the tnzonecfg database. This
option is available only if the system is configured
with the Solaris Trusted Extensions feature.
The tnzonecfg database is described in the tnzonecfg(4)
man page, which is part of the Solaris Trusted Exten-
sions Reference Manual.
anycast
Marks the logical interface as an anycast address by
setting the ANYCAST flag. See "INTERFACE FLAGS," below,
for more information on anycast.
-anycast
Marks the logical interface as not an anycast address by
clearing the ANYCAST flag.
arp
Enable the use of the Address Resolution Protocol
("ARP") in mapping between network level addresses and
link level addresses (default). This is currently imple-
mented for mapping between IPv4 addresses and MAC
addresses.
-arp
Disable the use of the ARP on a physical interface. ARP
cannot be disabled on an IPMP IP interface.
SunOS 5.11 Last change: 6 Jul 2010 2
System Administration Commands ifconfig(1M)
auth_algs authentication algorithm
For a tunnel, enable IPsec AH with the authentication
algorithm specified. The algorithm can be either a
number or an algorithm name, including any to express no
preference in algorithm. All IPsec tunnel properties
must be specified on the same command line. To disable
tunnel security, specify an auth_alg of none.
It is now preferable to use the ipsecconf(1M) command
when configuring a tunnel's security properties. If
ipsecconf was used to set a tunnel's security proper-
ties, this keyword will not affect the tunnel.
auto-dhcp
Use DHCP to automatically acquire an address for this
interface. This option has a completely equivalent alias
called dhcp.
For IPv6, the interface specified must be the zeroth
logical interface (the physical interface name), which
has the link-local address.
primary
Defines the interface as the primary. The interface
is defined as the preferred one for the delivery of
client-wide configuration data. Only one interface
can be the primary at any given time. If another
interface is subsequently selected as the primary,
it replaces the previous one. Nominating an inter-
face as the primary one will not have much signifi-
cance once the client work station has booted, as
many applications will already have started and been
configured with data read from the previous primary
interface.
wait seconds
The ifconfig command will wait until the operation
either completes or for the interval specified,
whichever is the sooner. If no wait interval is
given, and the operation is one that cannot complete
immediately, ifconfig will wait 30 seconds for the
requested operation to complete. The symbolic value
forever may be used as well, with obvious meaning.
SunOS 5.11 Last change: 6 Jul 2010 3
System Administration Commands ifconfig(1M)
drop
Remove the specified interface from DHCP control
without notifying the DHCP server, and record the
current lease for later use. Additionally, for IPv4,
set the IP address to zero. For IPv6, unplumb all
logical interfaces plumbed by dhcpagent.
extend
Attempt to extend the lease on the interface's IP
address. This is not required, as the agent will
automatically extend the lease well before it
expires.
inform
Obtain network configuration parameters from DHCP
without obtaining a lease on IP addresses. This is
useful in situations where an IP address is obtained
through mechanisms other than DHCP.
ping
Check whether the interface given is under DHCP con-
trol, which means that the interface is managed by
the DHCP agent and is working properly. An exit
status of 0 means success.
release
Relinquish the IP addresses on the interface by
notifying the server and discard the current lease.
For IPv4, set the IP address to zero. For IPv6, all
logical interfaces plumbed by dhcpagent are
unplumbed.
start
Start DHCP on the interface.
status
Display the DHCP configuration status of the inter-
face.
SunOS 5.11 Last change: 6 Jul 2010 4
System Administration Commands ifconfig(1M)
auto-revarp
Use the Reverse Address Resolution Protocol (RARP) to
automatically acquire an address for this interface.
This will fail if the interface does not support RARP;
for example, IPoIB (IP over InfiniBand), and on IPv6
interfaces.
broadcast address
For IPv4 only. Specify the address to use to represent
broadcasts to the network. The default broadcast address
is the address with a host part of all 1's. A "+" (plus
sign) given for the broadcast value causes the broadcast
address to be reset to a default appropriate for the
(possibly new) address and netmask. The arguments of
ifconfig are interpreted left to right. Therefore
example% ifconfig -a netmask + broadcast +
and
example% ifconfig -a broadcast + netmask +
may result in different values being assigned for the
broadcast addresses of the interfaces.
deprecated
Marks the logical interface as deprecated. An address
associated with a deprecated interface will not be used
as source address for outbound packets unless either
there are no other addresses available on the interface
or the application has bound to this address explicitly.
The status display shows DEPRECATED as part of flags.
See for information on the flags supported by ifconfig.
-deprecated
Marks a logical interface as not deprecated. An address
associated with such an interface could be used as a
source address for outbound packets.
preferred
Marks the logical interface as preferred. This option is
SunOS 5.11 Last change: 6 Jul 2010 5
System Administration Commands ifconfig(1M)
only valid for IPv6 addresses. Addresses assigned to
preferred logical interfaces are preferred as source
addresses over all other addresses configured on the
system, unless the address is of an inappropriate scope
relative to the destination address. Preferred addresses
are used as source addresses regardless of which physi-
cal interface they are assigned to. For example, you can
configure a preferred source address on the loopback
interface and advertise reachability of this address by
using a routing protocol.
-preferred
Marks the logical interface as not preferred.
destination dest_address
Set the destination address for a point-to point inter-
face.
dhcp
This option is an alias for option auto-dhcp
down
Mark a logical interface as "down". (That is, turn off
the IFF_UP bit.) When a logical interface is marked
"down," the system does not attempt to use the address
assigned to that interface as a source address for out-
bound packets and will not recognize inbound packets
destined to that address as being addressed to this
host. Additionally, when all logical interfaces on a
given physical interface are "down," the physical inter-
face itself is disabled.
When a logical interface is down, all routes that
specify that interface as the output (using the -ifp
option in the route(1M) command or RTA_IFP in a
route(7P) socket) are removed from the forwarding table.
Routes marked with RTF_STATIC are returned to the table
if the interface is brought back up, while routes not
marked with RTF_STATIC are simply deleted.
When all logical interfaces that could possibly be used
to reach a particular gateway address are brought down
(specified without the interface option as in the previ-
ous paragraph), the affected gateway routes are treated
SunOS 5.11 Last change: 6 Jul 2010 6
System Administration Commands ifconfig(1M)
as though they had the RTF_BLACKHOLE flag set. All
matching packets are discarded because the gateway is
unreachable.
encaplimit n
Set the tunnel encapsulation limit for the interface to
n. This option applies to IPv4-in-IPv6 and IPv6-in-IPv6
tunnels only, and it simply modifies the encaplimit link
property of the underlying IPv6 tunnel link (see
dladm(1M)). The tunnel encapsulation limit controls how
many more tunnels a packet can enter before it leaves
any tunnel, that is, the tunnel nesting level.
This option is obsolete, superseded by the dladm(1M)
encaplimit link property.
-encaplimit
Disable generation of the tunnel encapsulation limit.
This option applies only to IPv4-in-IPv6 and IPv6-in-
IPv6 tunnels. This simply sets the encaplimit link pro-
perty of the underlying IPv6 tunnel link to 0 (see
dladm(1M) encaplimit).
This option is obsolete, superseded by the dladm(1M)
encaplimit link property.
encr_auth_algs authentication algorithm
For a tunnel, enable IPsec ESP with the authentication
algorithm specified. It can be either a number or an
algorithm name, including any or none, to indicate no
algorithm preference. If an ESP encryption algorithm is
specified but the authentication algorithm is not, the
default value for the ESP authentication algorithm will
be any.
It is now preferable to use the ipsecconf(1M) command
when configuring a tunnel's security properties. If
ipsecconf was used to set a tunnel's security proper-
ties, this keyword will not affect the tunnel.
encr_algs encryption algorithm
For a tunnel, enable IPsec ESP with the encryption algo-
rithm specified. It can be either a number or an algo-
rithm name. Note that all IPsec tunnel properties must
SunOS 5.11 Last change: 6 Jul 2010 7
System Administration Commands ifconfig(1M)
be specified on the same command line. To disable tunnel
security, specify the value of encr_alg as none. If an
ESP authentication algorithm is specified, but the
encryption algorithm is not, the default value for the
ESP encryption will be null.
It is now preferable to use the ipsecconf(1M) command
when configuring a tunnel's security properties. If
ipsecconf was used to set a tunnel's security proper-
ties, this keyword will not affect the tunnel.
ether [ address ]
If no address is given and the user is root or has suf-
ficient privileges to open the underlying datalink, then
display the current Ethernet address information.
Otherwise, if the user is root or has sufficient
privileges, set the Ethernet address of the interfaces
to address. The address is an Ethernet address
represented as x:x:x:x:x:x where x is a hexadecimal
number between 0 and FF. Similarly, for the IPoIB (IP
over InfiniBand) interfaces, the address will be 20
bytes of colon-separated hex numbers between 0 and FF.
Some, though not all, Ethernet interface cards have
their own addresses. To use cards that do not have their
own addresses, refer to section 3.2.3(4) of the IEEE
802.3 specification for a definition of the locally
administered address space. Note that all IP interfaces
in an IPMP group must have unique hardware addresses;
see in.mpathd(1M).
-failover
Set NOFAILOVER on the logical interface. This makes the
associated address available for use by in.mpathd to
perform probe-based failure detection for the associated
physical IP interface. As a side effect, DEPRECATED will
also be set on the logical interface. This operation is
not permitted on an IPMP IP interface.
failover
Clear NOFAILOVER on the logical interface. This is the
default. These logical interfaces are subject to migra-
tion when brought up (see IP MULTIPATHING GROUPS).
SunOS 5.11 Last change: 6 Jul 2010 8
System Administration Commands ifconfig(1M)
group [ name |""]
When applied to a physical interface, it places the
interface into the named group. If the group does not
exist, it will be created, along with one or more IPMP
IP interfaces (for IPv4, IPv6, or both). Any UP
addresses that are not also marked NOFAILOVER are sub-
ject to migration to the IPMP IP interface (see IP MUL-
TIPATHING GROUPS). Specifying a group name of "" removes
the physical IP interface from the group.
When applied to a physical IPMP IP interface, it renames
the IPMP group to have the new name. If the name already
exists, or a name of "" is specified, it fails. Renaming
IPMP groups is discouraged. Instead, the IPMP IP inter-
face should be given a meaningful name when it is
created by means of the ipmp subcommand, which the sys-
tem will also use as the IPMP group name.
index n
Change the interface index for the interface. The value
of n must be an interface index (if_index) that is not
used on another interface. if_index will be a non-zero
positive number that uniquely identifies the network
interface on the system.
ipmp
Create an IPMP IP interface with the specified name. An
interface must be separately created for use by IPv4 and
IPv6. The address_family parameter controls whether the
command applies to IPv4 or IPv6 (IPv4 if unspecified).
All IPMP IP interfaces have the IPMP flag set.
metric n
Set the routing metric of the interface to n; if no
value is specified, the default is 0. The routing metric
is used by the routing protocol. Higher metrics have the
effect of making a route less favorable. Metrics are
counted as addition hops to the destination network or
host.
modinsert mod_name@pos
Insert a module with name mod_name to the stream of the
device at position pos. The position is relative to the
SunOS 5.11 Last change: 6 Jul 2010 9
System Administration Commands ifconfig(1M)
stream head. Position 0 means directly under stream
head.
Based upon the example in the modlist option, use the
following command to insert a module with name ipqos
under the ip module and above the firewall module:
example% ifconfig eri0 modinsert ipqos@2
A subsequent listing of all the modules in the stream of
the device follows:
example% ifconfig eri0 modlist
0 arp
1 ip
2 ipqos
3 firewall
4 eri
modlist
List all the modules in the stream of the device.
The following example lists all the modules in the
stream of the device:
example% ifconfig eri0 modlist
0 arp
1 ip
2 firewall
4 eri
modremove mod_name@pos
Remove a module with name mod_name from the stream of
the device at position pos. The position is relative to
the stream head.
Based upon the example in the modinsert option, use the
following command to remove the firewall module from the
stream after inserting the ipqos module:
example% ifconfig eri0 modremove firewall@3
SunOS 5.11 Last change: 6 Jul 2010 10
System Administration Commands ifconfig(1M)
A subsequent listing of all the modules in the stream of
the device follows:
example% ifconfig eri0 modlist
0 arp
1 ip
2 ipqos
3 eri
Note that the core IP stack modules, for example, ip and
tun modules, cannot be removed.
mtu n
Set the maximum transmission unit of the interface to n.
For many types of networks, the mtu has an upper limit,
for example, 1500 for Ethernet. This option sets the
FIXEDMTU flag on the affected interface.
netmask mask
For IPv4 only. Specify how much of the address to
reserve for subdividing networks into subnetworks. The
mask includes the network part of the local address and
the subnet part, which is taken from the host field of
the address. The mask contains 1's for the bit positions
in the 32-bit address which are to be used for the net-
work and subnet parts, and 0's for the host part. The
mask should contain at least the standard network por-
tion, and the subnet field should be contiguous with the
network portion. The mask can be specified in one of
four ways:
1. with a single hexadecimal number with a leading
0x,
2. with a dot-notation address,
3. with a "+" (plus sign) address, or
4. with a pseudo host name/pseudo network name
found in the network database networks(4).
If a "+" (plus sign) is given for the netmask value, the
mask is looked up in the netmasks(4) database. This
lookup finds the longest matching netmask in the data-
base by starting with the interface's IPv4 address as
the key and iteratively masking off more and more low
order bits of the address. This iterative lookup ensures
that the netmasks(4) database can be used to specify the
SunOS 5.11 Last change: 6 Jul 2010 11
System Administration Commands ifconfig(1M)
netmasks when variable length subnetmasks are used
within a network number.
If a pseudo host name/pseudo network name is supplied as
the netmask value, netmask data may be located in the
hosts or networks database. Names are looked up by first
using gethostbyname(3NSL). If not found there, the names
are looked up in getnetbyname(3SOCKET). These interfaces
may in turn use nsswitch.conf(4) to determine what data
store(s) to use to fetch the actual value.
For both inet and inet6, the same information conveyed
by mask can be specified as a prefix_length attached to
the address parameter.
nud
Enables the neighbor unreachability detection mechanism
on a point-to-point physical interface.
-nud
Disables the neighbor unreachability detection mechanism
on a point-to-point physical interface.
plumb
For a physical IP interface, open the datalink associ-
ated with the physical interface name and set up the
plumbing needed for IP to use the datalink. When used
with a logical interface name, this command is used to
create a specific named logical interface on an existing
physical IP interface.
An interface must be separately plumbed for IPv4 and
IPv6 according to the address_family parameter (IPv4 if
unspecified). Before an interface has been plumbed, it
will not be shown by ifconfig -a.
Note that IPMP IP interfaces are not tied to a specific
datalink and are instead created with the ipmp subcom-
mand.
private
Tells the in.routed routing daemon that a specified log-
ical interface should not be advertised.
SunOS 5.11 Last change: 6 Jul 2010 12
System Administration Commands ifconfig(1M)
-private
Specify unadvertised interfaces.
removeif address
Remove the logical interface on the physical interface
specified that matches the address specified.
router
Enable IP forwarding on the interface. When enabled, the
interface is marked ROUTER, and IP packets can be for-
warded to and from the interface. Enabling ROUTER on any
IP interface in an IPMP group enables it on all IP
interfaces in that IPMP group.
-router
Disable IP forwarding on the interface. IP packets are
not forwarded to and from the interface. Disabling
ROUTER on any IP interface in an IPMP group disables it
on all IP interfaces in that IPMP group.
set
Set the address, prefix_length or both, for a logical
interface.
standby
Mark the physical IP interface as a STANDBY interface.
If an interface is marked STANDBY and is part of an IPMP
group, the interface will not be used for data traffic
unless another interface in the IPMP group becomes unus-
able. When a STANDBY interface is functional but not
being used for data traffic, it will also be marked
INACTIVE. This operation is not permitted on an IPMP IP
interface.
-standby
Clear STANDBY on the interface. This is the default.
SunOS 5.11 Last change: 6 Jul 2010 13
System Administration Commands ifconfig(1M)
subnet
Set the subnet address for an interface.
tdst tunnel_dest_address
Set the destination address of a tunnel. The address
should not be the same as the dest_address of the tun-
nel, because no packets leave the system over such a
tunnel.
This option is obsolete, superseded by the dladm(1M)
create-iptun and modify-iptun subcommands.
thoplimit n
Set the hop limit for a tunnel interface. The hop limit
value is used as the TTL in the IPv4 header for the
IPv6-in-IPv4 and IPv4-in-IPv4 tunnels. For IPv6-in-IPv6
and IPv4-in-IPv6 tunnels, the hop limit value is used as
the hop limit in the IPv6 header. This option simply
modifies the hoplimit link property of the underlying IP
tunnel link (see dladm(1M)).
This option is obsolete, superseded by the dladm(1M)
hoplimit link property.
token address/prefix_length
Set the IPv6 token of an interface to be used for
address autoconfiguration.
example% ifconfig eri0 inet6 token ::1/64
trailers
This flag previously caused a nonstandard encapsulation
of IPv4 packets on certain link levels. Drivers supplied
with this release no longer use this flag. It is pro-
vided for compatibility, but is ignored.
-trailers
Disable the use of a "trailer" link level encapsulation.
SunOS 5.11 Last change: 6 Jul 2010 14
System Administration Commands ifconfig(1M)
tsrc tunnel_src_address
Set the source address of a tunnel. This is the source
address on an outer encapsulating IP header. It must be
an address of another interface already configured using
ifconfig.
This option is obsolete, superseded by the dladm(1M)
create-iptun and modify-iptun subcommands.
unplumb
For a physical or IPMP interface, remove all associated
logical IP interfaces and tear down any plumbing needed
for IP to use the interface. For an IPMP IP interface,
this command will fail if the group is not empty. For a
logical interface, the logical interface is removed.
An interface must be separately unplumbed for IPv4 and
IPv6 according to the address_family parameter (IPv4 if
unspecified). Upon success, the interface name will no
longer appear in the output of ifconfig -a.
up
Mark a logical interface UP. As a result, the IP module
will accept packets destined to the associated address
(unless the address is zero), along with any associated
multicast and broadcast IP addresses. Similarly, the IP
module will allow packets to be sent with the associated
address as a source address. At least one logical inter-
face must be UP for the associated physical interface to
send or receive packets
usesrc [ name | none ]
Specify a physical interface to be used for source
address selection. If the keyword none is used, then any
previous selection is cleared.
When an application does not choose a non-zero source
address using bind(3SOCKET), the system will select an
appropriate source address based on the outbound inter-
face and the address selection rules (see
ipaddrsel(1M)).
When usesrc is specified and the specified interface is
selected in the forwarding table for output, the system
looks first to the specified physical interface and its
SunOS 5.11 Last change: 6 Jul 2010 15
System Administration Commands ifconfig(1M)
associated logical interfaces when selecting a source
address. If no usable address is listed in the forward-
ing table, the ordinary selection rules apply. For exam-
ple, if you enter:
# ifconfig eri0 usesrc vni0
...and vni0 has address 10.0.0.1 assigned to it, the
system will prefer 10.0.0.1 as the source address for
any packets originated by local connections that are
sent through eri0. Further examples are provided in the
EXAMPLES section.
While you can specify any physical interface (or even
loopback), be aware that you can also specify the vir-
tual IP interface (see vni(7D)). The virtual IP inter-
face is not associated with any physical hardware and is
thus immune to hardware failures. You can specify any
number of physical interfaces to use the source address
hosted on a single virtual interface. This simplifies
the configuration of routing-based multipathing. If one
of the physical interfaces were to fail, communication
would continue through one of the remaining, functioning
physical interfaces. This scenario assumes that the
reachability of the address hosted on the virtual inter-
face is advertised in some manner, for example, through
a routing protocol.
Because the ifconfig preferred option is applied to all
interfaces, it is coarser-grained than the usesrc
option. It will be overridden by usesrc and setsrc
(route subcommand), in that order.
xmit
Enable a logical interface to transmit packets. This is
the default behavior when the logical interface is up.
-xmit
Disable transmission of packets on an interface. The
interface will continue to receive packets.
zone zonename
Place the logical interface in zone zonename. The named
zone must be active in the kernel in the ready or run-
ning state. The interface is unplumbed when the zone is
SunOS 5.11 Last change: 6 Jul 2010 16
System Administration Commands ifconfig(1M)
halted or rebooted. The zone must be configure to be an
shared-IP zone. zonecfg(1M) is used to assign network
interface names to exclusive-IP zones.
-zone
Place IP interface in the global zone. This is the
default.
OPERANDS
The interface operand, as well as address parameters that
affect it, are described below.
interface
A string of one of the following forms:
o name physical-unit, for example, eri0 or ce1
o name physical-unit:logical-unit, for example,
eri0:1
o ip.tunN, ip6.tunN, or ip6to4.tunN for implicit
IP tunnel links
If the interface name starts with a dash (-), it is
interpreted as a set of options which specify a set of
interfaces. In such a case, -a must be part of the
options and any of the additional options below can be
added in any order. If one of these interface names is
given, the commands following it are applied to all of
the interfaces that match.
-a
Apply the command to all interfaces of the specified
address family. If no address family is supplied,
either on the command line or by means of
/etc/default/inet_type, then all address families
will be selected.
-d
Apply the commands to all "down" interfaces in the
system.
-D
Apply the commands to all interfaces not under DHCP
SunOS 5.11 Last change: 6 Jul 2010 17
System Administration Commands ifconfig(1M)
(Dynamic Host Configuration Protocol) control.
-u
Apply the commands to all "up" interfaces in the
system.
-Z
Apply the commands to all interfaces in the user's
zone.
-4
Apply the commands to all IPv4 interfaces.
-6
Apply the commands to all IPv6 interfaces.
address_family
The address family is specified by the address_family
parameter. The ifconfig command currently supports the
following families: inet and inet6. If no address family
is specified, the default is inet.
ifconfig honors the DEFAULT_IP setting in the
/etc/default/inet_type file when it displays interface
information . If DEFAULT_IP is set to IP_VERSION4, then
ifconfig will omit information that relates to IPv6
interfaces. However, when you explicitly specify an
address family (inet or inet6) on the ifconfig command
line, the command line overrides the DEFAULT_IP set-
tings.
address
For the IPv4 family (inet), the address is either a host
name present in the host name data base (see hosts(4))
or in the Network Information Service (NIS) map hosts,
or an IPv4 address expressed in the Internet standard
"dot notation".
For the IPv6 family (inet6), the address is either a
SunOS 5.11 Last change: 6 Jul 2010 18
System Administration Commands ifconfig(1M)
host name present in the host name data base (see
hosts(4)) or in the Network Information Service (NIS)
map ipnode, or an IPv6 address expressed in the Internet
standard colon-separated hexadecimal format represented
as x:x:x:x:x:x:x:x where x is a hexadecimal number
between 0 and FFFF.
prefix_length
For the IPv4 and IPv6 families (inet and inet6), the
prefix_length is a number between 0 and the number of
bits in the address. For inet, the number of bits in the
address is 32; for inet6, the number of bits in the
address is 128. The prefix_length denotes the number of
leading set bits in the netmask.
dest_address
If the dest_address parameter is supplied in addition to
the address parameter, it specifies the address of the
correspondent on the other end of a point-to-point link.
tunnel_dest_address
An address that is or will be reachable through an
interface other than the tunnel being configured. This
tells the tunnel where to send the tunneled packets.
This address must not be the same as the interface des-
tination address being configured.
tunnel_src_address
An address that is attached to an already configured
interface that has been configured "up" with ifconfig.
INTERFACE FLAGS
The ifconfig command supports the following interface flags.
The term "address" in this context refers to a logical
interface, for example, eri0:0, while "interface" refers to
the physical interface, for example, eri0.
ADDRCONF
The address is from stateless addrconf. The stateless
mechanism allows a host to generate its own address
using a combination of information advertised by routers
and locally available information. Routers advertise
SunOS 5.11 Last change: 6 Jul 2010 19
System Administration Commands ifconfig(1M)
prefixes that identify the subnet associated with the
link, while the host generates an "interface identifier"
that uniquely identifies an interface in a subnet. In
the absence of information from routers, a host can gen-
erate link-local addresses. This flag is specific to
IPv6.
ANYCAST
Indicates an anycast address. An anycast address identi-
fies the nearest member of a group of systems that pro-
vides a particular type of service. An anycast address
is assigned to a group of systems. Packets are delivered
to the nearest group member identified by the anycast
address instead of being delivered to all members of the
group.
BROADCAST
This broadcast address is valid. This flag and POINTTO-
POINT are mutually exclusive
CoS
This interface supports some form of Class of Service
(CoS) marking. An example is the 802.1D user priority
marking supported on VLAN interfaces. For IPMP IP inter-
faces, this will only be set if all interfaces in the
group have CoS set.
Note that this flag is only set on interfaces over VLAN
links and over Ethernet links that have their dladm(1M)
tagmode link property set to normal.
DEPRECATED
This address is deprecated. This address will not be
used as a source address for outbound packets unless
there are no other addresses on this interface or an
application has explicitly bound to this address. An
IPv6 deprecated address is part of the standard mechan-
ism for renumbering in IPv6 and will eventually be
deleted when not used. For both IPv4 and IPv6, DEPRE-
CATED is also set on all NOFAILOVER addresses, though
this may change in a future release.
SunOS 5.11 Last change: 6 Jul 2010 20
System Administration Commands ifconfig(1M)
DHCPRUNNING
The logical interface's address is managed by
dhcpagent(1M). For IPv6, this will also be set on the
zeroth logical interface if DHCPv6 has been started on
the interface; see in.ndpd(1M).
DUPLICATE
The logical interface has been disabled because the IP
address configured on the interface is a duplicate. Some
other node on the network is using this address. If the
address was configured by DHCP or is temporary, the sys-
tem will choose another automatically, if possible. Oth-
erwise, the system will attempt to recover this address
periodically and the interface will recover when the
conflict has been removed from the network. Changing the
address or netmask, or setting the logical interface to
up will restart duplicate detection. Setting the inter-
face to down terminates recovery and removes the DUPLI-
CATE flag.
FAILED
The in.mpathd daemon has determined that the interface
has failed. FAILED interfaces will not be used to send
or receive IP data traffic. If this is set on a physical
IP interface in an IPMP group, IP data traffic will con-
tinue to flow over other usable IP interfaces in the
IPMP group. If this is set on an IPMP IP interface, the
entire group has failed and no data traffic can be sent
or received over any interfaces in that group.
FIXEDMTU
The MTU has been set using the -mtu option. This flag is
read-only. Interfaces that have this flag set have a
fixed MTU value that is unaffected by dynamic MTU
changes that can occur when drivers notify IP of link
MTU changes.
INACTIVE
The physical interface is functioning but is not used to
send or receive data traffic according to administrative
policy. This flag is initially set by the standby sub-
command and is subsequently controlled by in.mpathd. It
also set when FAILBACK=no mode is enabled (see
SunOS 5.11 Last change: 6 Jul 2010 21
System Administration Commands ifconfig(1M)
in.mpathd(1M)) to indicate that the IP interface has
repaired but is not being used.
IPMP
Indicates that this is an IPMP IP interface.
LOOPBACK
Indicates that this is the loopback interface.
MULTI_BCAST
Indicates that the broadcast address is used for multi-
cast on this interface.
MULTICAST
The interface supports multicast. IP assumes that any
interface that supports hardware broadcast, or that is a
point-to-point link, will support multicast.
NOARP
There is no address resolution protocol (ARP) for this
interface that corresponds to all interfaces for a dev-
ice without a broadcast address. This flag is specific
to IPv4.
NOFAILOVER
The address associated with this logical interface is
available to in.mpathd for probe-based failure detection
of the associated physical IP interface.
NOLOCAL
The interface has no address , just an on-link subnet.
NONUD
NUD is disabled on this interface. NUD (neighbor
unreachability detection) is used by a node to track the
reachability state of its neighbors, to which the node
SunOS 5.11 Last change: 6 Jul 2010 22
System Administration Commands ifconfig(1M)
actively sends packets, and to perform any recovery if a
neighbor is detected to be unreachable. This flag is
specific to IPv6.
NORTEXCH
The interface does not exchange routing information. For
RIP-2, routing packets are not sent over this interface.
Additionally, messages that appear to come over this
interface receive no response. The subnet or address of
this interface is not included in advertisements over
other interfaces to other routers.
NOXMIT
Indicates that the address does not transmit packets.
RIP-2 also does not advertise this address.
OFFLINE
The interface is offline and thus cannot send or receive
IP data traffic. This is only set on IP interfaces in an
IPMP group. See if_mpadm(1M) and cfgadm(1M).
POINTOPOINT
Indicates that the address is a point-to-point link.
This flag and BROADCAST are mutually exclusive
PREFERRED
This address is a preferred IPv6 source address. This
address will be used as a source address for IPv6 com-
munication with all IPv6 destinations, unless another
address on the system is of more appropriate scope. The
DEPRECATED flag takes precedence over the PREFERRED
flag.
PRIVATE
Indicates that this address is not advertised. For RIP-
2, this interface is used to send advertisements. How-
ever, neither the subnet nor this address are included
in advertisements to other routers.
SunOS 5.11 Last change: 6 Jul 2010 23
System Administration Commands ifconfig(1M)
PROMISC
A read-only flag indicating that an interface is in
promiscuous mode. All addresses associated with an
interface in promiscuous mode will display (in response
to ifconfig -a, for example) the PROMISC flag.
ROUTER
Indicates that IP packets can be forwarded to and from
the interface.
RUNNING
Indicates that the required resources for an interface
are allocated. For some interfaces this also indicates
that the link is up. For IPMP IP interfaces, RUNNING is
set as long as one IP interface in the group is active.
STANDBY
Indicates that this physical interface will not be used
for data traffic unless another interface in the IPMP
group becomes unusable. The INACTIVE and FAILED flags
indicate whether it is actively being used.
TEMPORARY
Indicates that this is a temporary IPv6 address as
defined in RFC 3041.
UNNUMBERED
This flag is set when the local IP address on the link
matches the local address of some other link in the sys-
tem
UP
Indicates that the logical interface (and the associated
physical interface) is up. The IP module will accept
packets destined to UP addresses (unless the address is
zero), along with any associated multicast and broadcast
IP addresses. Similarly, the IP module will allow pack-
ets to be sent with an UP address as a source address.
SunOS 5.11 Last change: 6 Jul 2010 24
System Administration Commands ifconfig(1M)
VIRTUAL
Indicates that the physical interface has no underlying
hardware. It is not possible to transmit or receive
packets through a virtual interface. These interfaces
are useful for configuring local addresses that can be
used on multiple interfaces. (See also the usesrc
option.)
L3PROTECT
Indicates that Layer-3 protection has been enforced on
the physical interface using the allowed-ips link pro-
perty in dladm(1M).
LOGICAL INTERFACES
Solaris TCP/IP allows multiple logical interfaces to be
associated with a physical network interface. This allows a
single machine to be assigned multiple IP addresses, even
though it may have only one network interface. Physical net-
work interfaces have names of the form driver-name
physical-unit-number, while logical interfaces have names of
the form driver-name physical-unit-number:logical-unit-
number. A physical interface is configured into the system
using the plumb command. For example:
example% ifconfig eri0 plumb
Once a physical interface has been "plumbed", logical inter-
faces associated with the physical interface can be config-
ured by separate -plumb or -addif options to the ifconfig
command.
example% ifconfig eri0:1 plumb
allocates a specific logical interface associated with the
physical interface eri0. The command
example% ifconfig eri0 addif 192.168.200.1/24 up
SunOS 5.11 Last change: 6 Jul 2010 25
System Administration Commands ifconfig(1M)
allocates the next available logical unit number on the eri0
physical interface and assigns an address and prefix_length.
A logical interface can be configured with parameters (
address,prefix_length, and so on) different from the physi-
cal interface with which it is associated. Logical inter-
faces that are associated with the same physical interface
can be given different parameters as well. Each logical
interface must be associated with an existing and "up" phy-
sical interface. So, for example, the logical interface
eri0:1 can only be configured after the physical interface
eri0 has been plumbed.
To delete a logical interface, use the unplumb or removeif
options. For example,
example% ifconfig eri0:1 down unplumb
will delete the logical interface eri0:1.
IP MULTIPATHING GROUPS
Physical interfaces that share the same link-layer broadcast
domain must be collected into a single IP Multipathing
(IPMP) group using the group subcommand. Each IPMP group has
an associated IPMP IP interface, which can either be expli-
citly created (the preferred method) by using the ipmp sub-
command or implicitly created by ifconfig in response to
placing an IP interface into a new IPMP group. Implicitly-
created IPMP interfaces will be named ipmpN where N is the
lowest integer that does not conflict with an existing IP
interface name or IPMP group name.
Each IPMP IP interface is created with a matching IPMP group
name, though it can be changed using the group subcommand.
Each IPMP IP interface hosts a set of highly-available IP
addresses. These addresses will remain reachable so long as
at least one interface in the group is active, where
"active" is defined as having at least one UP address and
having INACTIVE, FAILED, and OFFLINE clear. IP addresses
hosted on the IPMP IP interface may either be configured
statically or configured through DHCP by means of the dhcp
subcommand.
Interfaces assigned to the same IPMP group are treated as
equivalent and monitored for failure by in.mpathd. Provided
SunOS 5.11 Last change: 6 Jul 2010 26
System Administration Commands ifconfig(1M)
that active interfaces in the group remain, IP interface
failures (and any subsequent repairs) are handled tran-
sparently to sockets-based applications. IPMP is also
integrated with the Dynamic Reconfiguration framework (see
cfgadm(1M)), which enables network adapters to be replaced
in a way that is invisible to sockets-based applications.
The IP module automatically load-spreads all outbound
traffic across all active interfaces in an IPMP group. Simi-
larly, all UP addresses hosted on the IPMP IP interface will
be distributed across the active interfaces to promote
inbound load-spreading. The ipmpstat(1M) utility allows many
aspects of the IPMP subsystem to be observed, including the
current binding of IP data addresses to IP interfaces.
When an interface is placed into an IPMP group, any UP logi-
cal interfaces are "migrated" to the IPMP IP interface for
use by the group, unless:
o the logical interface is marked NOFAILOVER;
o the logical interface hosts an IPv6 link-local
address;
o the logical interface hosts an IPv4 0.0.0.0
address.
Likewise, once an interface is in a group, if changes are
made to a logical interface such that it is UP and not
exempted by one of the conditions above, it will also
migrate to the associated IPMP IP interface. Logical inter-
faces never migrate back, even if the physical interface
that contributed the address is removed from the group.
Each interface placed into an IPMP group may be optionally
configured with a "test" address that in.mpathd will use for
probe-based failure detection; see in.mpathd(1M). These
addresses must be marked NOFAILOVER (using the -failover
subcommand) prior to being marked UP. Test addresses may
also be acquired through DHCP by means of the dhcp subcom-
mand.
For more background on IPMP, please see the IPMP-related
chapters of the System Administration Guide: Network Inter-
faces and Network Virtualization.
SunOS 5.11 Last change: 6 Jul 2010 27
System Administration Commands ifconfig(1M)
CONFIGURING IPV6 INTERFACES
When an IPv6 physical interface is plumbed and configured
"up" with ifconfig, it is automatically assigned an IPv6
link-local address for which the last 64 bits are calculated
from the MAC address of the interface.
example% ifconfig eri0 inet6 plumb up
The following example shows that the link-local address has
a prefix of fe80::/10.
example% ifconfig eri0 inet6
ce0: flags=2000841<UP,RUNNING,MULTICAST,IPv6>
mtu 1500 index 2
inet6 fe80::a00:20ff:fe8e:f3ad/10
Link-local addresses are only used for communication on the
local subnet and are not visible to other subnets.
If an advertising IPv6 router exists on the link advertising
prefixes, then the newly plumbed IPv6 interface will auto-
configure logical interface(s) depending on the prefix
advertisements. For example, for the prefix advertisement
2001:0db8:3c4d:0:55::/64, the autoconfigured interface will
look like:
eri0:2: flags=2080841<UP,RUNNING,MULTICAST,ADDRCONF,IPv6>
mtu 1500 index 2
inet6 2001:0db8:3c4d:55:a00:20ff:fe8e:f3ad/64
Even if there are no prefix advertisements on the link, you
can still assign global addresses manually, for example:
example% ifconfig eri0 inet6 addif \
2001:0db8:3c4d:55:a00:20ff:fe8e:f3ad/64 up
To configure boot-time defaults for the interface eri0,
place the following entry in the /etc/hostname6.eri0 file:
SunOS 5.11 Last change: 6 Jul 2010 28
System Administration Commands ifconfig(1M)
addif 2001:0db8:3c4d:55:a00:20ff:fe8e:f3ad/64 up
Configuring IP-over-IP Tunnel Interfaces
An IP tunnel is conceptually comprised of two parts: a vir-
tual link between two or more IP nodes, and an IP interface
above this link which allows the system to transmit and
receive IP packets encapsulated by the underlying link.
The dladm(1M) command is used to configure tunnel links, and
ifconfig is used to configure IP interfaces over those tun-
nel links. An IPv4-over-IPv4 tunnel is created by plumbing
an IPv4 interface over an IPv4 tunnel link. An IPv6-over-
IPv4 tunnel is created by plumbing an IPv6 interface over an
IPv6 tunnel link, and so forth.
When IPv6 interfaces are plumbed over IP tunnel links, their
IPv6 addresses are automatically set. For IPv4 and IPv6 tun-
nels, source and destination link-local addresses of the
form fe80::interface-id are configured. For IPv4 tunnels,
the interface-id is the IPv4 tunnel source or destination
address. For IPv6 tunnels, the interface-id is the last 64
bits of the IPv6 tunnel source or destination address. For
example, for an IPv4 tunnel between 10.1.2.3 and 10.4.5.6,
the IPv6 link-local source and destination addresses of the
IPv6 interface would be fe80::a01:203 and fe80::a04:506. For
an IPv6 tunnel between 2000::1234:abcd and 3000::5678:abcd,
the IPv6 link-local source and destination addresses of the
interface would be fe80::1234:abcd and fe80::5678:abcd.
These default link-local addresses can be overridden by
specifying the addresses explicitly, as with any other
point-to-point interface.
For 6to4 tunnels, a 6to4 global address of the form
2002:tsrc::1/16 is configured. The tsrc portion is the tun-
nel source IPv4 address. The prefix length of the 6to4
interface is automatically set to 16, as all 6to4 packets
(destinations in the 2002::/16 range) are forwarded to the
6to4 tunnel interface. For example, for a 6to4 link with a
tunnel source of 75.1.2.3, the IPv6 interface would have an
address of 2002:4b01:203::1/16.
Additional IPv6 addresses can be added using the addif
option or by plumbing additional logical interfaces.
For backward compatibility, the plumbing of tunnel IP inter-
faces with special names will implicitly result in the
SunOS 5.11 Last change: 6 Jul 2010 29
System Administration Commands ifconfig(1M)
creation of tunnel links without invoking dladm create-
iptun. These tunnel names are:
ip.tunN An IPv4 tunnel
ip6.tunN An IPv6 tunnel
ip.6to4tunN A 6to4 tunnel
These tunnels are "implicit tunnels", denoted with the i
flag in dladm show-iptun output. The tunnel links over which
these special IP interfaces are plumbed are automatically
created, and they are automatically deleted when the last
reference is released (that is, when the last IP interface
is unplumbed).
The tsrc, tdst, encaplim, and hoplimit options to ifconfig
are obsolete and maintained only for backward compatibility.
They are equivalent to their dladm(1M) counterparts.
Display of Tunnel Security Settings
The ifconfig output for IP tunnel interfaces indicates
whether IPsec policy is configured for the underlying IP
tunnel link. For example, a line of the following form will
be displayed if IPsec policy is present:
tunnel security settings --> use 'ipsecconf -ln -i ip.tun1'
If you do net set security policy, using either ifconfig or
ipsecconf(1M), there is no tunnel security setting
displayed.
EXAMPLES
Example 1 Using the ifconfig Command
If your workstation is not attached to an Ethernet, the net-
work interface, for example, eri0, should be marked "down"
as follows:
example% ifconfig eri0 down
SunOS 5.11 Last change: 6 Jul 2010 30
System Administration Commands ifconfig(1M)
Example 2 Printing Addressing Information
To print out the addressing information for each interface,
use the following command:
example% ifconfig -a
Example 3 Resetting the Broadcast Address
To reset each interface's broadcast address after the net-
masks have been correctly set, use the next command:
example% ifconfig -a broadcast +
Example 4 Changing the Ethernet Address
To change the Ethernet address for interface ce0, use the
following command:
example% ifconfig ce0 ether aa:1:2:3:4:5
Example 5 Configuring an IP-in-IP Tunnel
To configure an IP-in-IP tunnel, first create an IP tunnel
link (tunsrc and tundst are hostnames with corresponding
IPv4 entries in /etc/hosts):
example% dladm create-iptun -T ipv4 -s tunsrc -d tundst tun0
Then plumb a point-to-point interface, supplying the source
and destination addresses (mysrc and thedst are hostnames
with corresponding IPv4 entries in /etc/hosts):
example% ifconfig tun0 plumb mysrc thedst up
SunOS 5.11 Last change: 6 Jul 2010 31
System Administration Commands ifconfig(1M)
Use ipsecconf(1M), as described above, to configure tunnel
security properties.
Configuring IPv6 tunnels is done by using a tunnel type of
ipv6 with create-iptun. IPv6 interfaces can also be plumbed
over either type of tunnel.
Example 6 Configuring 6to4 Tunnels
To configure 6to4 tunnels, first create a 6to4 tunnel link
(myv4addr is a hostname with a corresponding IPv4 entry in
/etc/hosts):
example% dladm create-iptun -T 6to4 -s myv4addr my6to4tun0
Then an IPv6 interface is plumbed over this link:
example% ifconfig my6to4tun0 inet6 plumb up
The IPv6 address of the interface is automatically set as
described above.
Example 7 Configuring IP Forwarding on an Interface
To enable IP forwarding on a single interface, use the fol-
lowing command:
example% ifconfig eri0 router
To disable IP forwarding on a single interface, use the fol-
lowing command:
example% ifconfig eri0 -router
SunOS 5.11 Last change: 6 Jul 2010 32
System Administration Commands ifconfig(1M)
Example 8 Configuring Source Address Selection Using a Vir-
tual Interface
The following command configures source address selection
such that every packet that is locally generated with no
bound source address and going out on qfe2 prefers a source
address hosted on vni0.
example% ifconfig qfe2 usesrc vni0
The ifconfig -a output for the qfe2 and vni0 interfaces
displays as follows:
qfe2: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu
1500 index 4
usesrc vni0
inet 1.2.3.4 netmask ffffff00 broadcast 1.2.3.255
ether 0:3:ba:17:4b:e1
vni0: flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL>
mtu 0 index 5
srcof qfe2
inet 3.4.5.6 netmask ffffffff
Observe, above, the usesrc and srcof keywords in the ifcon-
fig output. These keywords also appear on the logical
instances of the physical interface, even though this is a
per-physical interface parameter. There is no srcof keyword
in ifconfig for configuring interfaces. This information is
determined automatically from the set of interfaces that
have usesrc set on them.
The following command, using the none keyword, undoes the
effect of the preceding ifconfig usesrc command.
example% ifconfig qfe2 usesrc none
Following this command, ifconfig -a output displays as fol-
lows:
SunOS 5.11 Last change: 6 Jul 2010 33
System Administration Commands ifconfig(1M)
qfe2: flags=1100843<UP,BROADCAST,RUNNING,MULTICAST,ROUTER,IPv4> mtu
1500 index 4
inet 1.2.3.4 netmask ffffff00 broadcast 1.2.3.255
ether 0:3:ba:17:4b:e1
vni0: flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL>
mtu 0 index 5
inet 3.4.5.6 netmask ffffffff
Note the absence of the usesrc and srcof keywords in the
output above.
Example 9 Configuring Source Address Selection for an IPv6
Address
The following command configures source address selection
for an IPv6 address, selecting a source address hosted on
vni0.
example% ifconfig qfe1 inet6 usesrc vni0
Following this command, ifconfig -a output displays as fol-
lows:
qfe1: flags=2000841<UP,RUNNING,MULTICAST,IPv6> mtu 1500 index 3
usesrc vni0
inet6 fe80::203:baff:fe17:4be0/10
ether 0:3:ba:17:4b:e0
vni0: flags=2002210041<UP,RUNNING,NOXMIT,NONUD,IPv6,VIRTUAL> mtu 0
index 5
srcof qfe1
inet6 fe80::203:baff:fe17:4444/128
vni0:1: flags=2002210040<RUNNING,NOXMIT,NONUD,IPv6,VIRTUAL> mtu 0
index 5
srcof qfe1
inet6 fec0::203:baff:fe17:4444/128
vni0:2: flags=2002210040<RUNNING,NOXMIT,NONUD,IPv6,VIRTUAL> mtu 0
index 5
srcof qfe1
inet6 2000::203:baff:fe17:4444/128
SunOS 5.11 Last change: 6 Jul 2010 34
System Administration Commands ifconfig(1M)
Depending on the scope of the destination of the packet
going out on qfe1, the appropriately scoped source address
is selected from vni0 and its aliases.
Example 10 Using Source Address Selection with Shared-IP
Zones
The following is an example of how the usesrc feature can be
used with the zones(5) facility in Solaris. The following
commands are invoked in the global zone:
example% ifconfig hme0 usesrc vni0
example% ifconfig eri0 usesrc vni0
example% ifconfig qfe0 usesrc vni0
Following the preceding commands, the ifconfig -a output for
the virtual interfaces would display as:
vni0: flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL>
mtu 0 index 23
srcof hme0 eri0 qfe0
inet 10.0.0.1 netmask ffffffff
vni0:1:
flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL> mtu 0
index 23
zone test1
srcof hme0 eri0 qfe0
inet 10.0.0.2 netmask ffffffff
vni0:2:
flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL> mtu 0
index 23
zone test2
srcof hme0 eri0 qfe0
inet 10.0.0.3 netmask ffffffff
vni0:3:
flags=20011100c1<UP,RUNNING,NOARP,NOXMIT,ROUTER,IPv4,VIRTUAL> mtu 0
index 23
zone test3
srcof hme0 eri0 qfe0
inet 10.0.0.4 netmask ffffffff
There is one virtual interface alias per zone (test1, test2,
and test3). A source address from the virtual interface
SunOS 5.11 Last change: 6 Jul 2010 35
System Administration Commands ifconfig(1M)
alias in the same zone is selected. The virtual interface
aliases were created using zonecfg(1M) as follows:
example% zonecfg -z test1
zonecfg:test1> add net
zonecfg:test1:net> set physical=vni0
zonecfg:test1:net> set address=10.0.0.2
The test2 and test3 zone interfaces and addresses are
created in the same way.
Example 11 Turning Off DHCPv6
The following example shows how to disable automatic use of
DHCPv6 on all interfaces, and immediately shut down DHCPv6
on the interface named hme0. See in.ndpd(1M) and
ndpd.conf(4) for more information on the automatic DHCPv6
configuration mechanism.
example% echo ifdefault StatefulAddrConf false >> /etc/inet/ndpd.conf
example% pkill -HUP -x in.ndpd
example% ifconfig hme0 dhcp release
FILES
/etc/netmasks
Netmask data.
/etc/default/inet_type
Default Internet protocol type.
ATTRIBUTES
See attributes(5) for descriptions of the following attri-
butes:
SunOS 5.11 Last change: 6 Jul 2010 36
System Administration Commands ifconfig(1M)
_______________________________________________________________________
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
|_______________________________________|______________________________|
| Availability | SUNWcs |
|_______________________________________|______________________________|
| Interface Stability for command-line| Committed |
| options | |
|_______________________________________|______________________________|
| Interface Stability for command output| Uncommitted |
|_______________________________________|______________________________|
SEE ALSO
dhcpinfo(1), cfgadm(1M), dhcpagent(1M), dladm(1M),
if_mpadm(1M), in.mpathd(1M), in.ndpd(1M), in.routed(1M),
ipmpstat(1M), ipsecconf(1M), ndd(1M), netstat(1M),
zoneadm(1M), zonecfg(1M), ethers(3SOCKET),
gethostbyname(3NSL), getnetbyname(3SOCKET), hosts(4),
inet_type(4), ndpd.conf(4), netmasks(4), networks(4),
nsswitch.conf(4), attributes(5), privileges(5), zones(5),
arp(7P), ipsecah(7P), ipsecesp(7P)
System Administration Guide: IP Services
DIAGNOSTICS
ifconfig sends messages that indicate if:
o the specified interface does not exist
o the requested address is unknown
o the user is not privileged and tried to alter an
interface's configuration
NOTES
Do not select the names broadcast, down, private, trailers,
up or other possible option names when you choose host
names. If you choose any one of these names as host names,
it can cause unusual problems that are extremely difficult
to diagnose.