[OmniOS-discuss] Networking problem within a Solaris zone

[Philippe]

Hi,

I have OmniOS working great on a server running in a datacenter. Thanks for putting together this Illumos distribution.

I have some weird problems in one of my zone though, and would welcome any help, even though my problem is probably not OmniOS specific. There is some hosts I can reach from my zones but others that I cannot, and the strange thing is that I can reach all servers ok from the global zone:

From the global zone:

$ /usr/sbin/ping google.com                                                                   
  google.com is alive
$ /usr/sbin/ping omniti.com                                                                   
  omniti.com is alive
$ /usr/sbin/ping retinart.net                                                                 
  retinart.net is alive
$ /usr/sbin/ping -s retinart.net
  64 bytes from apache2-udder.yaounde.dreamhost.com (69.163.194.182)

From the zone:

$ /usr/sbin/ping google.com                                                                   
  google.com is alive
$ /usr/sbin/ping omniti.com                                                                   
  omniti.com is alive
$ /usr/sbin/ping retinart.net                                                                 
  <*** hanging with no output ***>
$ /usr/sbin/ping 69.163.194.182
  <*** hanging with no output ***>

traceroute does not go very far:

$ /usr/sbin/traceroute 69.163.194.182                                                          
traceroute to 69.163.194.182 (69.163.194.182), 30 hops max, 40 byte packets
 1  * * *
 2  * * *
 3  * * *
 4  * * *
 5  * * *
 6  * * *
 7  * * *
 8  * * *
 9  * * *
10  * * *
11  * * *

$ /usr/sbin/ifconfig -a                                                                        
lo0:1: flags=2001000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv4,VIRTUAL> mtu 8232 index 1
        inet 127.0.0.1 netmask ff000000 
bge0:1: flags=1000843<UP,BROADCAST,RUNNING,MULTICAST,IPv4> mtu 1500 index 2
        inet 69.195.131.85 netmask ff000000 broadcast 69.255.255.255
lo0:1: flags=2002000849<UP,LOOPBACK,RUNNING,MULTICAST,IPv6,VIRTUAL> mtu 8252 index 1
        inet6 ::1/128 


/usr/sbin/arp -a                                                                             
Net to Media Table: IPv4
Device   IP Address               Mask      Flags      Phys Addr
------ -------------------- --------------- -------- ---------------
bge0   69.195.131.85        255.255.255.255 SPLA     00:30:48:59:a1:2c
bge0   69.195.131.84        255.255.255.255 SPLA     00:30:48:59:a1:2c
bge0   69.195.131.81        255.255.255.255          00:0c:db:53:f3:00
bge0   69.195.131.83        255.255.255.255 SPLA     00:30:48:59:a1:2c
bge0   69.195.131.82        255.255.255.255 SPLA     00:30:48:59:a1:2c


69.195.131.82 is the IP address of bg0 in the global zone, I then have multiple zones with network settings like:

zonecfg:myzone> info net
net:
	address: 69.195.131.85
	allowed-address not specified
	physical: bge0
	defrouter not specified


I am not very experienced with Solaris zones and I am puzzled by this "partial networking failure" where only specific IPs cannot be reached from the zone. I would welcome any help in troubleshooting this problem.

Thanks in advance,
- Philippe