Sorry about the delay in response but I was trying to find the patch
number before I posted the replies. Many thanks to Ade Faleti, Skye Poier, and
Frank Cusack. Apparently this is a known bug in 2.6. My Sun rep has not giving
any patch info yet, so if anyone knows a patch ID I would appreciate it. Thanks
guys.
Rob.
>Hi,
>
> We have an Ultra 2 running Solaris 2.6 with multiple IP addresses
>in the same subnet bound to a single interface, hme0. We want the primary
>IP address of this machine to be the first one bound to the card. The
>rest of the IPs have been setup to service virtual hosts. This machine
>needs to have access to an nfs mount through the primary IP address but
>not through the other ones, so we setup mount restrictions on the server
>limiting access to our primary IP addresses on all of our virtual host
>servers. This setup works fine on Solaris 2.5.1. After setting up the
>virtual host interfaces on 2.6 we ran into the problem that any outgoing
>IP connections from the machine would cycle through all of the addresses
>that where bound to the card instead of just using the primary ip address
>as their source address. I used ndd to set ip_enable_group_ifs to false
>and thought I fixed the problem. Now, all ip and tcp services behave as
>they do under 2.5 as far as I can tell, but udp (namely rpc) services
>instead of using the primary IP address on the card uses the last IP
>address bound to the card as their source address. Do this make any
>sense? Can anyone explain to me the changes they made to 2.6 that causes
>this behavior?
>
>Thanks,
>Rob.
_______________________________________________________________________
Robert Bays robert@ironlight.com
Ironlight Digital phone: (415) 646-7000
222 Sutter Street Sixth Floor
San Francisco, CA 94108
_______________________________________________________________________