One issue with sharing NICs when more than one VLAN is defined on a Solaris host with non-global zones is routing between non-global zones for the same physical host. By default routing is direct, not across the wire, regardless if the other non-global zones are in different VLANs. Such is usually deemed a compromise, espeically when there is an intended hardware Firewall for security residing between two wired VLANS (as in our case). read more updated information
↧