tnzonecfg revision 5d3b8cb7141cfa596d20cdc5043b8a6df635938d
278N/A#
278N/A# CDDL HEADER START
278N/A#
278N/A# The contents of this file are subject to the terms of the
1072N/A# Common Development and Distribution License (the "License").
278N/A# You may not use this file except in compliance with the License.
278N/A#
919N/A# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
919N/A# or http://www.opensolaris.org/os/licensing.
919N/A# See the License for the specific language governing permissions
919N/A# and limitations under the License.
919N/A#
919N/A# When distributing Covered Code, include this CDDL HEADER in each
919N/A# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
919N/A# If applicable, add the following below this CDDL HEADER, with the
919N/A# fields enclosed by brackets "[]" replaced with your own identifying
919N/A# information: Portions Copyright [yyyy] [name of copyright owner]
919N/A#
919N/A# CDDL HEADER END
919N/A#
919N/A#
919N/A# Copyright 2009 Sun Microsystems, Inc. All rights reserved.
919N/A# Use is subject to license terms.
919N/A#
278N/A#There are five fields separated by colon in this configuration file:
278N/A#First Field: Name for the corresponding zone.
278N/A# It is used when zone is configured.
278N/A#
493N/A#Second Field: Label for the corresponding zone.
278N/A# It is used to label the zone when zone is booted.
278N/A# The label can be either hex label or symbolic ones defined by
1072N/A# label_encodings files.
278N/A#
911N/A#Third Field: Policy match level for non-transport traffic.
1072N/A# Currently unused.
1072N/A#
911N/A#Fourth Field: Multi-Level port configuration entry for private addresses.
278N/A# mlp info is list of semicolon separated mlp configuration entry.
278N/A# Each mlp configuration entry is specified by port/protocol.
278N/A#
278N/A#Fifth Field: Multi-Level port configuration entry for shared address.
278N/A# It only applies to global zones.
278N/A#
278N/A# This is the default global zone configuration. Note that although this
278N/A# entry must have a label and match flag, neither is configurable by the user.
278N/A#
278N/A# Multilevel Port (MLP) specification:
493N/A#
969N/A# MLP PURPOSE
278N/A# --- -------
970N/A# 111 Port Mapper
970N/A# 500 IKE (IPsec key management)
970N/A# 515 BSD Multilevel Printing
970N/A# 631 IPP Multilevel Printing
970N/A# 2049 NFSv4 server
970N/A# 4500 IKE NAT-T (IPsec/IKE nat traversal)
970N/A# 6000-6003 Multilevel Desktop
970N/A#
970N/Aglobal:ADMIN_LOW:1:111/tcp;111/udp;500/udp;4500/udp;515/tcp;631/tcp;2049/tcp;6000-6003/tcp:6000-6003/tcp;500/udp;4500/udp
910N/A