xref: /onnv-gate/usr/src/cmd/tsol/tnctl/tnzonecfg (revision 10934:e209937a4f19)
14746Srica#
24746Srica# CDDL HEADER START
34746Srica#
44746Srica# The contents of this file are subject to the terms of the
54746Srica# Common Development and Distribution License (the "License").
64746Srica# You may not use this file except in compliance with the License.
74746Srica#
84746Srica# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
94746Srica# or http://www.opensolaris.org/os/licensing.
104746Srica# See the License for the specific language governing permissions
114746Srica# and limitations under the License.
124746Srica#
134746Srica# When distributing Covered Code, include this CDDL HEADER in each
144746Srica# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
154746Srica# If applicable, add the following below this CDDL HEADER, with the
164746Srica# fields enclosed by brackets "[]" replaced with your own identifying
174746Srica# information: Portions Copyright [yyyy] [name of copyright owner]
184746Srica#
194746Srica# CDDL HEADER END
204746Srica#
214746Srica#
22*10934Ssommerfeld@sun.com# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
234746Srica# Use is subject to license terms.
244746Srica#
254746Srica#There are five fields separated by colon in this configuration file:
264746Srica#First Field: 	Name for the corresponding zone.
274746Srica#		It is used when zone is configured.
284746Srica#
294746Srica#Second Field: 	Label for the corresponding zone.
304746Srica#		It is used to label the zone when zone is booted.
314746Srica#		The label can be either hex label or  symbolic ones defined by
324746Srica#		label_encodings files.
334746Srica#
344746Srica#Third Field:	Policy match level for non-transport traffic.
354746Srica#		Currently unused.
364746Srica#
374746Srica#Fourth Field:	Multi-Level port configuration entry for private addresses.
384746Srica#		mlp info is list of semicolon separated mlp configuration entry.
394746Srica#		Each mlp configuration entry is specified by port/protocol.
404746Srica#
414746Srica#Fifth Field:	Multi-Level port configuration entry for shared address.
424746Srica#		It only applies to global zones.
434746Srica#
444746Srica# This is the default global zone configuration.  Note that although this
454746Srica# entry must have a label and match flag, neither is configurable by the user.
464746Srica#
474746Srica# Multilevel Port (MLP) specification:
484746Srica#
494746Srica#	MLP			PURPOSE
504746Srica#	---			-------
514746Srica#	111			Port Mapper
52*10934Ssommerfeld@sun.com#	500			IKE (IPsec key management)
534746Srica#	515			BSD Multilevel Printing
544746Srica#	631			IPP Multilevel Printing
554746Srica#	2049			NFSv4 server
56*10934Ssommerfeld@sun.com#	4500			IKE NAT-T (IPsec/IKE nat traversal)
574746Srica#	6000-6003		Multilevel Desktop
584746Srica#
59*10934Ssommerfeld@sun.comglobal:ADMIN_LOW:1:111/tcp;111/udp;500/udp;4500/udp;515/tcp;631/tcp;2049/tcp;6000-6003/tcp:6000-6003/tcp;500/udp;4500/udp
60