/
How to configure NAT

How to configure NAT

Owned by Igor Kozhukhov(dilos)
Example:
$ sudo dladm create-etherstub vsw0
$ sudo dladm create-vnic -l vsw0 int0 # for global zone and will be using as gateway for zones with exclusive interface
# do skip step below because zone will up vnic with zone boot, just add 'int1' to zone and primary link to 'vsw0'
#$ sudo dladm create-vnic -l vsw0 int1 # for zone - look it, save mac address for exclusive ip-type and remove it
$ sudo routeadm -u -e ipv4-forwarding # enable port forwarding
$ sudo ndd -get /dev/tcp ip_forwarding # check it - it should be 1


root@myhost:/etc/ipf# cat ipnat.conf 

map int0 10.68.0.0/24 -> 0/32 proxy port ftp ftp/tcp

map int0 10.68.0.0/24 -> 0/32 portmap tcp/udp auto

map int0 10.68.0.0/24 -> 0/32

if need rule for access to 22 port to zone IP we can add

rdr int0 0/0 port 2222 -> 10.68.0.2 port 22


if will add access to zone 10.68.0.2:22 from external IP:2222


svcadm enable ipfilter


reference: http://www.scalingbits.com/book/export/html/479

Related content