NAME ipadm - configure Internet Protocol network interfaces and TCP/IP tunables SYNOPSIS ipadm create-if [-t] [-f inet | inet6] interface ipadm delete-if [-t] [-f inet | inet6] interface ipadm show-if [-P] [[-p] -o field[,...]] [interface] ipadm create-addr [-t] -T static [-d] -a {local|remote}=addr/[prefixlen],... addrobj ipadm create-addr [-t] -T dhcp [-w wait] [-p] addrobj ipadm create-addr [-t] -T addrconf [-I interface_id] [-p {stateful|stateless}={yes|no},..] addrobj ipadm delete-addr [-t] [-r] addrobj ipadm show-addr [-P] [[-p] -o field[,...]] [addrobj] ipadm enable-addr addrobj ipadm disable-addr addrobj ipadm refresh-addr addrobj ipadm set-prop [-t] -p prop=value[,...] protocol_module ipadm reset-prop [-t] -p prop protocol_module ipadm show-prop [-P] [[-c] -o field[,...]] [-p prop[,...]] [protocol_module] ipadm set-ifprop [-t] [-f inet | inet6] -p prop=value[,...] interface ipadm reset-ifprop [-t] [-f inet | inet6] -p prop interface ipadm show-ifprop [-P] [[-c]-o field[,...]] [-p prop,...] [interface] ipadm set-addrprop [-t] -p prop=value[,...] addrobj ipadm show-addrprop [-P] [[-c] -o field[,...]] [-p prop,...] addrobj DESCRIPTION The ipadm command is used to configure network interfaces by plumbing the underlying data-links and assigning address to them. This command also allows to get and set TCP/IP configuration parameters. By default all the subcommands are persistent in nature unless overridden using -t option. Each ipadm subcommand operates on one of the following objects: addrobj An address configured on a network interface is identified by an addrobj. An addrobj consists of two parts. The first part is the name of the network interface on which the address is configured and the second part is a user-specified string that can use any of the alphanumeric characters and can be at-most 32 characters in length. The two parts of the addrobj are delimited by '/'. An address object always represents a unique set of address(es) in a system. interface Name of the underlying IP interface on which network address are configured. protocol_module Name of the TCP/IP Internet protocol family on which the configuration parameters need to be configured. SUBCOMMANDS The following subcommands are supported: ipadm create-if [-t] [-f inet | inet6] interface Create an IP interface that handles both IPv4 and IPv6 packets. This subcommand opens the device associated with physical interface name and sets up the streams needed for IP to use the device, that is, it plumbs the network interface for use by IPv4 and IPv6. The address of the IPv4 interface will be set to 0.0.0.0 and the address of the IPv6 interface will be set to ::. -t, --temporary Specifies that any persistent interface configuration should not be restored after creating this interface. If the -t option is not specified, this command consults the persistent data-store and applies any configuration pertaining to this interface. -f inet | inet6, --family inet | inet6 The created interface will handle the packets for specified IP version type. ipadm delete-if [-t] [-f inet | inet6] interface Unplumb the interface. All addresses configured on the interface will be torn down. Further all the persistent information related to the interface will be removed from the persistent data-store and hence this interface will not be recreated on reboot. -t, --temporary Specifies that the deletion of interface is temporary. The interface will be removed from the active configuration and will be resurrected on the next reboot if (and only if) the persistent store contains any configuration information for the interface. -f inet | inet6, --family inet | inet6 Specifies that the interface handling the specified IP version type will be unplumbed. ipadm show-if [-P] [[-p] -o field[,...]] [interface] Show network interface configuration information, either for all the network interfaces configured on the system or for the specified network interface. -o field[,...], --output field[,...] A case-insensitive, comma-separated list of output fields to display. The field name must be one of the fields listed below, or the special value 'all' to display all fields. For each network interface, the following fields can be displayed: IFNAME The name of the interface MTU The maximum transmission unit size for the network interface being displayed. STATE Indicates one of the following for the displayed interface up - Indicates that the required resources for an interface are allocated. For some interfaces this also indicates that the link is up. failed - Interface has failed. New addresses cannot be created on this interface. If this interface is part of an IP network multipathing group, a failover will occur to another interface in the group, if possible. down - Otherwise. FLAGS Indicates the following for the displayed interface virtual - virtual interface (for e.g., vni0), the physical interface has no underlying hardware. It is not possible to transmit or receive packets through a virtual interface. These interfaces are useful for configuring local addresses that can be used on multiple interfaces. See vni(7d). ipmp - IPMP meta interface mcast - interface supports multicast bcast - interface supports broadcast pointtopoint - interface is a point-to-point link Note: bcast and pointtopoint are mutually exclusive. -p, --parsable Display using a stable machine-parsable format. The -o option is required with this option. See "Parsable Output Format", below. -P, --persistent Display persistent network interface configuration. ipadm create-addr [-t] -T static [-d] -a {local|remote}=addr/[prefixlen],... addrobj Creates a static IPv4 or IPv6 address on an interface specified in addrobj. If the interface on which the address is created is not plumbed, this subcommand will implicitly plumb the interface. The created static address will be identified by addrobj. The configured address will be enabled (marked UP) for use as a source/destination of outbound/inbound packets, by default. -t, --temporary Specifies that the configured address is temporary. Temporary address last until the next reboot. -d, --disabled Specifies that the configured address should not be enabled, that is, the address will not be used as a source/destination of IP packets. -a {local|remote}=addr/[prefixlen],... --address {local|remote}=addr/[prefixlen],... addr indicates literal IP address or hostname corresponding to the local or remote end-point (point-to-point interfaces). If a hostname is specified, it must resolve to a single IP address. Since it is possible that the network interface may be created before DNS and other non-local naming services are accessible over the network, it is advisable to add an entry for hostname in /etc/hosts, and to set up nsswitch.conf(4) to first look in local files. If the prefixlen is not explictly specified in the command-line, the netmasks for the address is obtained by following the search in the order listed below. (i) using the order specified for 'netmasks' in nswitch.conf(4) (ii) interpreting IPv4 address using Classful subnetting semantics defined in RFC 791, and interpreting IPv6 addresses using the definitions in RFC 4291. For point-to-point interfaces, along with the address of the local end-point the address of the remote end-point must be specified (e.g. -a local=,remote=). ipadm create-addr [-t] -T dhcp [-w wait] [-p] addrobj Creates a DHCP-controlled IPv4 address on an interface specified in addrobj. The created IPv4 address will be identified by addrobj. -t, --temporary Specifies that the configured address is temporary. Temporary address last until the next reboot. -w, --wait Specifies the amount of time, in seconds, to wait until the operation completes. If no wait interval is given, and the operation is one that cannot complete immediately, ipadm will wait 30 seconds for the requested operation to complete. The symbolic value forever may be used as well, with obvious meaning. -p, --primary Defines the interface as the primary. The interface is defined as the preferred one for the delivery of client-wide configuration data. Only one interface can be the primary at any given time. If another interface is subsequently selected as the primary, it replaces the previous one. Nominating an interface as the primary one will not have much significance once the client work station has booted, as many applications will already have started and been configured with data read from the previous primary interface. ipadm create-addr [-t] -T addrconf [-I interface_id] [-p {stateful|stateless}={yes|no},..] addrobj Creates an autoconfigured IPv6 addresses on an interface specified in addrobj. The created IPv6 addresses will be identified by addrobj. The system uses default Interface ID (for media-type ethernet, Interface ID is the MAC address of the interface) to generate auto-configured addresses. This behavior can be overridden using -I option. By default, - IPv6 addresses will be autoconfigured based on prefixes advertised by routers as described in RFC 4862 and - IPv6 addresses will be autoconfigured using the IPv6 address offered by DHCPv6 server as described in RFC 3315 on the specified interface, (i.e., -p stateful=yes,stateless=yes is the default option) -t, --temporary Specifies that the configured address is temporary. Temporary address last until the next reboot. -I interface_id, --interface-id Specifies the Interface ID to be used for generating auto-configured addresses. -p {stateful|stateless}={yes|no},.. --prop {stateful|stateless}={yes|no},.. Specifies if stateful or stateless or both methods of autoconfiguration should be enabled or not. if -p stateful=no, then stateful autoconfiguration based on DHCPv6 specified IPv6 addresses will not be performed. if -p stateless=no, then stateless autoconfiguration based on the router advertised prefixes will not be performed. if -p stateful=no,stateless=no, then both the methods of autoconfiguration will not be performed. Following option, -p stateful=yes,stateless=yes, is used by default. ipadm delete-addr [-t] [-r] addrobj Deletes all the addresses identified by addrobj on the interface specified in the addrobj. It also removes these addresses from the persistent data-store and hence these addresses will not be reapplied on reboot. If the addrobj is a DHCP-controlled address then removes the address from the system without notifying the DHCP server, and record the current lease for later use. Additionally, sets the IP address to zero. -t, --temporary Specifies that the deletion of addresses is temporary. The addresses will be removed from the active configuration and will be resurrected on the next reboot if (and only if) the persistent store contains these addresses. -r, --release Specifies to Relinquish the DHCP-controlled IP addresses on the interface by notifying the server and discard the current lease. Sets the IP address to zero. ipadm show-addr [-P] [[-p] -o field[,...]] [addrobj] -o field[,...], --output field[,...] A case-insensitive, comma-separated list of output fields to display. The field name must be one of the fields listed below, or the special value 'all' to display all fields. For each protocol_module, the following fields can be displayed: OBJECT The name of the address object. ORIGIN Origin of the address object and will be one of the following static, dhcp or addrconf. It corresponds to the type of the address object as specified by the -T option of create-addr. STATE Indicates one of the following for the addresses identified by the addrobj deprecated - will not be used as source address for outbound packets unless either there are no other addresses available on the interface or the application has bound to this address explicitly. invalid - Address is down. inaccessible - Interface is down. unknown - status unknown (e.g. interface is missing) tentative - Duplicate Address Detection (DAD) has been initiated duplicate - DAD Failure preferred - Default value in the absence of other qualifiers FLAGS Flags will identify one of the following for the addresses identified by the address object. Unnumbered - address matches the local address of some other link in the system private - address not advertised by the routing daemon temporary - temporary IPv6 address as defined in RFC 3041 ADDR Numeric IPv4 or IPv6 address. In the case of point-to- point interfaces, the addresses of both the endpoints, are printed (laddr->raddr). -P, --persistent Display persistent address object information ipadm enable-addr addrobj If the addrobj is of the type 'static' then the address identified by the address object is enabled, so that it can be used as a source/destination of outbound/inbound packets. This command has no effect if the addrobj has been disabled by the system because it is a duplicate address, or if the address was enabled prior to the enable-addr invocation. If the addrobj is of type dhcp or addrconf, the command errors out. ipadm disable-addr addrobj If the addrobj is of the type 'static' then the address identified by the address object is disabled, so that it cannot be used as a source/destination of outbound/inbound packets. This command has no effect if the addrobj was already disabled prior to the "disable-addr" invocation. If the addrobj is of type dhcp or addrconf, the command errors out. ipadm refresh-addr addrobj If the addrobj is of the type 'static', then DAD (Duplicate Address Detection) will be restarted (if necessary) on the address identified by the address object. If the addrobj is of the type 'dhcp', then the lease duration obtained on the address will be extended by the DHCP client daemon. If the addrobj is of the type 'addrconf', then the in.ndpd(1M) daemon sends out router solicitations (RFC 4862). ipadm set-prop [-t] -p prop=value[,...] protocol_module Sets the value of a property on the protocol_module specified. Only one property can be specified at a time. The properties supported on a protocol_module and the property's possible values can be retrieved using show-prop subcommand. Following protocol_modules are supported: IP, TCP, UDP and SCTP. -t, --temporary Specifies that the changes to properties are temporary. Temporary changes last until the next reboot. -p prop=value[,...], --prop prop=value[,...] A property to set to the specified values. ipadm reset-prop [-t] -p prop protocol_module Resets a property of the specified protocol_module to the default value of the property. -t, --temporary Specifies that the resets are temporary. Values are reset to default values. Temporary resets last until the next reboot. -p prop=value[,...], --prop prop=value[,...] A property to be reset. ipadm show-prop [-P] [[-c] -o field[,...]] [-p prop[,...]] [protocol_module] Show the current or persistent values of one or more properties, either for all the supported protocol_module or for the specified protocol_module. Current values are shown by default. If no -p options is specified, all available properties are displayed. For each property, the following fields are displayed: -o field[,...], --output field[,...] A case-insensitive, comma-separated list of output fields to display. The field name must be one of the fields listed below, or the special value 'all' to display all fields. For each protocol_module, the following fields can be displayed: PROTO The name of the protocol_module PROPERTY The name of the property. FAMILY Identifies the family on which this property applies (only when it matters, otherwise -- is displayed). The value shown will be inet, inet6 or -- PERM The read/write permissions of the property. The value shown will be r (read only), w (write only) or rw (read and write) VALUE The current (or persistent) property value. If the value is not set, it is shown as --. If it is unknown, the value is shown as ?. Persistent values that are not set or have been reset will be shown as -- and will use the system DEFAULT value (if any). DEFAULT The default value of the property. If the property has no default value, -- is shown. POSSIBLE A comma-separated list of the values the property can have. If the values span a numeric range, min - max might be shown as shorthand. If the possible values are unknown or unbounded, -- is shown. The list of properties and the available values for a given property further depends on the type of protocol and to the protocol implementation. -c, --parsable Display using a stable machine-parsable format. The -o option is required with this option. See "Parsable Output Format", below. -P, --persistent Display persistent protcol_module property information -p prop,..., --prop=prop,... A comma-separated list of properties to show. See the sections on protocol_module properties following subcommand descriptions. ipadm set-ifprop [-t] [-f inet | inet6] -p prop=value[,...] interface Sets the value of a property on the interface specified. Only one property can be specified at a time. The properties supported on an interface and the property's possible values can be retrieved using show-ifprop subcommand. -t, --temporary Specifies that the changes are temporary. Temporary changes last until the next reboot. -f inet | inet6, --family inet | inet6 Identifies the address family on which this property applies. The ipadm currently supports the following families: inet and inet6 -p prop=value[,...], --prop prop=value[,...] A property to set to the specified values. ipadm reset-ifprop [-t] [-f inet | inet6] -p prop interface Resets a property of the specified interface to it's default value. That is, property is reset to the value(s) it had at startup. -t, --temporary Specifies that the resets are temporary. Values are reset to default values. Temporary resets last until the next reboot. -f inet | inet6, --family inet | inet6 Identifies the address family on which this property applies. The ipadm currently supports the following families: inet and inet6 -p prop=value[,...], --prop prop=value[,...] A property to be reset. ipadm show-ifprop [-P] [[-c]-o field[,...]] [-p prop,...] [interface] Show the current or persistent values of one or more properties, either for all the created(plumbed) interfaces or for the specified interface. Current values are shown by default. If no -p option is specified, all available properties are displayed. For each property, the following fields are displayed: -o field[,...], --output field[,...] A case-insensitive, comma-separated list of output fields to display. The field name must be one of the fields listed below, or the special value 'all' to display all fields. For each interface, the following fields can be displayed: IFNAME The name of the interface PROPERTY The name of the property PROTO The name of the protocol module the property belongs to. The ipadm currently supports IP, TCP, UDP and SCTP. FAMILY Identifies the family on which this property applies (only when it matters, otherwise -- is displayed). The value shown will be inet, inet6 or -- PERM The read/write permissions of the property. The value shown will be r (read only), w (write only) or rw (read and write) VALUE The current (or persistent) property value. If the value is not set, it is shown as --. If it is unknown, the value is shown as ?. Persistent values that are not set or have been reset will be shown as -- and will use the system DEFAULT value (if any). DEFAULT The default value of the property. If the property has no default value, -- is shown. POSSIBLE A comma-separated list of the values the property can have. If the values span a numeric range, min - max might be shown as shorthand. If the possible values are unknown or unbounded, -- is shown. The list of properties and the available values for a given property further depends on the type of the specified interface. -c, --parsable Display using a stable machine-parsable format. The -o option is required with this option. See "Parsable Output Format", below. -P, --persistent Display persistent protcol_module property information -p prop,..., --prop=prop,... A comma-separated list of properties to show. See the sections on interface properties following subcommand descriptions. ipadm set-addrprop [-t] -p prop=value[,...] addrobj Sets the value of a property on the addrobj specified. If the addrobj maps to several addresses, then property changes applies to all the addresses referenced by the addrobj. Only one property can be specified at a time. The properties supported on the addrobj and the property's possible values can be retrieved using show-addrprop subcommand. -t, --temporary Specifies that the changes are temporary. Temporary changes last until the next reboot. -p prop=value[,...], --prop prop=value[,...] A property to set to the specified values. ipadm show-addrprop [-P] [[-c] -o field[,...]] [-p prop,...] addrobj Show the current or persistent values of one or more properties, either for all the configured address objects or for the specified address object. Current values are shown by default. If no -p option is specified, all available properties are displayed. For each property, the following fields are displayed: -o field[,...], --output field[,...] A case-insensitive, comma-separated list of output fields to display. The field name must be one of the fields listed below, or the special value 'all' to display all fields. For each interface, the following fields can be displayed: OBJECT The name of the address object. PROPERTY The name of the property VALUE The current (or persistent) property value. If the value is not set, it is shown as --. If it is unknown, the value is shown as ?. Persistent values that are not set or have been reset will be shown as -- and will use the system DEFAULT value (if any). DEFAULT The default value of the property. If the property has no default value, -- is shown. POSSIBLE A comma-separated list of the values the property can have. If the values span a numeric range, min - max might be shown as shorthand. If the possible values are unknown or unbounded, -- is shown. -c, --parsable Display using a stable machine-parsable format. The -o option is required with this option. See "Parsable Output Format", below. -P, --persistent Display persistent protcol_module property information -p prop,..., --prop=prop,... A comma-separated list of properties to show. See the sections on address object properties following subcommand descriptions. Parsable Output Format Many ipadm subcommands have an option that displays output in a machine-parsable format. The output format is one or more lines of colon (:) delimited fields. The fields displayed are specific to the subcommand used and are listed under the entry for the -o option for a given subcommand. Output includes only those fields requested by means of the -o option, in the order requested. When you request multiple fields, any literal colon characters are escaped by a backslash (\) before being output. Similarly, literal backslash characters will also be escaped (\\). This escape format is parsable by using shell read(1) functions with the environment variable IFS=: Note that escaping is not done when you request only a single field. Protocol Module Properties: Refer System Administrative Guide for the list of protocol module properties supported in ipadm. Interface Properties: The following interface properties are supported: arp Enables/disables the use of the Address Resolution Protocol (ARP) on an interface. ARP is used in mapping between network level addresses and link level addresses (default). This is currently implemented for mapping between IPv4 addresses and MAC addresses. Possible values are on or off. Default is on. forwarding Enables/disables IP forwarding on an interface. When enabled, the interface is marked ROUTER, and IP packets can be forwarded to and from the interface. When disabled IP packets are not forwarded to and from the interface. Possible values are on or off. Default is off. metric Set the routing metric of the interface to n; if no value is specified, the default is 0. The routing metric is used by the routing protocol. Higher metrics have the effect of making a route less favorable. Metrics are counted as addition hops to the destination network or host. mtu Set the maximum transmission unit of the interface to n. For many types of networks, the mtu has an upper limit, for example, 1500 for Ethernet. This option sets the FIXEDMTU flag on the affected interface. nud Enables/disables the neighbor unreachability detection mechanism on a point-to-point physical interface. Possible values are on or off. Default is on. usesrc Specifies a physical interface to be used for source address selection. If the keyword none is used, then any previous selection is cleared. rtexchg Enables/disables exchanging of routing information on this interface reasm-timeout Specifies the reassembly fragment timeout value, that is, amount of time IP fragments are held while waiting for missing fragments. Address Properties: The following address properties are supported: prefixlen Speccifies the number of left-most contiguous bits of the address that comprise the IPv6 prefix or IPv4 netmask of the address. The remaining low-order bits define the host part of the address. When prefix len is converted to a text representaion of the address, the address contain 1's for the bit positions which are to be used for the network part, and 0's for the host part. The prefixlen must be specified as a single decimal number. private Specifies that the addresses should not be advertised by the in.routed routing daemon. Possible values are on or off. Default is off. xmit Enables packets to be transmitted using the addresses referenced by the address object. This is the default behavior when the address is up. Possible values are on or off. Default is on. zone Specifies the zone in which all the addresses referenced by the address object should be placed. The named zone must be active in the kernel in the ready or running state. The interface is unplumbed when the zone is halted or rebooted. The zone must be configure to be an shared-IP zone. zonecfg(1M) is used to assign network interface names to exclusive-IP zones. Possible values are list of all the zones configured on the system. Default is global. EXAMPLES Example 1. Creating IPv4 static addresses Create the address 10.2.3.5/24 on interface bge1 and enable the address for use. # ipadm create-addr -T static -a local=10.2.3.4/24 bge1/v4static1 Create the address 10.2.3.5/24 on interface bge1 but do not enable it for use until explicitly enabled. # ipadm create-addr -T static -d -a local=10.2.3.5/24 bge1/v4static2 Enable the address object bge1/v4static2 that was previously disabled. # ipadm enable-addr bge1/v4static2 If the DUPLICATE flag was set on the address object, then refresh-addr will verify if the address is still a duplicate on the network. If not, the address will be enabled. # ipadm refresh-addr bge1/v4static2 List the addresses that were configured. This shows that the address bge1/v4static2 is not a duplicate. # ipadm show-addr OBJECT TYPE STATE FLAGS ADDR lo0/? static preferred --- 127.0.0.1/8 bge1/v4static1 static preferred --- 10.2.3.4/24 bge1/v4static2 static preferred --- 10.2.3.10/24 Example 2. Creating DHCPv4-controlled addresses Obtain a DHCPv4 address on interface bge1 # ipadm create-addr -T dhcp bge1/dhaddr Extend the lease duration for the DHCPv4 address object bge1/dhaddr # ipadm refresh-addr bge1/dhaddr Example 3. Creating IPv6 addresses Autoconfigure IPv6 addresses on bge1 using in.ndpd with default interface id. A link-local address is configured first, followed by in.ndpd adding the stateless and stateful autoconfigured addresses. # ipadm create-addr -T addrconf bge1/v6addr Create an IPv6 static address. To be able to configure an IPv6 address, which is not a link-local address, the interface should already have a link-local address configured on it. It was accomplished by the previous step with '-T addrconf'. # ipadm create-addr -T static -a local=2ff0::f3ad/64 bge1/v6static Change the prefix length of an IPv6 address # ipadm set-addrprop -p prefixlen=80 bge1/v6static All the autoconfigured addresses and the updated prefix length can be viewed by listing the addresses. # ipadm show-addr OBJECT TYPE STATE FLAGS ADDR lo0/? static preferred --- ::1/128 bge1/v6addr addrconf preferred --- fe80::203:baff:fe94:2f01/10 bge1/v6addr addrconf preferred --- 2002:a08:39f0:1:203:baff:fe94:2f00/64 bge1/v6addr addrconf preferred --- 2001:db8:1:2::402f/128 bge1/v6static static preferred --- 2ff0::f3ad/80 Example 4. Configuring an IPv4 tunnel Create the tunnel source address using ipadm. Then, create the tunnel link using dladm. Configure the IPv4 and IPv6 addresses on the tunnel IP interface. # ipadm create-addr -T static -a local=10.2.3.4/24 bge1/v4static # dladm create-iptun -T ipv4 -s 10.2.3.4 -d 10.2.3.5 tun0 # ipadm create-addr -T static \ -a local=173.129.134.1,remote=173.129.134.2 tun0/v4tunaddr # ipadm create-addr -T static \ -a local=2ff1::3344,remote=2ff1::3345 tun0/v6tunaddr # ipadm show-addr OBJECT TYPE STATE FLAGS ADDR lo0/? static preferred --- 127.0.0.1/8 bge1/v4static static preferred --- 10.2.3.4/24 tun0/v4tunaddr static preferred --- 173.129.134.1-->173.129.134.2 lo0/? static preferred --- ::1/128 tun0/v6tunaddr static preferred --- 2ff1::3344-->2ff1::3345 Example 5. Viewing the plumbed interfaces # ipadm show-if INTF STATE MTU FLAGS lo0 ok 8232 mcast,virtual bge1 ok 1500 bcast,mcast tun0 ok 8212 mcast,pointopoint List all the persistent interfaces that will be created on next reboot. # ipadm show-if -P INTF MTU bge1 -- tun0 -- Example 6. Displaying all interface properties for a given interface # ipadm show-ifprop net0 INTF PROPERTY PROTO FAMILY PERM VALUE DEFAULT POSSIBLE net0 arp ip inet rw on on on,off net0 metric ip inet rw 0 0 -- net0 metric ip inet6 rw 0 0 -- net0 nud ip inet6 rw on on on,off net0 usesrc ip -- rw none none -- net0 reasm-timeout ip inet rw 15000 15000 5000-255000 net0 reasm-timeout ip inet6 rw 60000 60000 5000-255000 : : Example 7. Configuring per-interface properties Set the mtu of the interface net0 to 900. # ipadm set-ifprop -p mtu=1400 net0 The mtu of both IPv4 and IPv6 packets will be changed to 1400. Setting for individual family can be done using -f flag. # ipadm set-ifprop -f inet -p mtu 1100 net0 # ipadm set-ifprop -f inet6 -p mtu 1400 net0 # ipadm show-ifprop -p mtu net0 INTF PROPERTY PROTO FAMILY PERM VALUE DEFAULT POSSIBLE net0 mtu ip inet rw 1500 1500 -- net0 mtu ip inet6 rw 1500 1500 -- Example 8. Displaying all supported properties on protcol modules. List the supported properties on tcp. # ipadm show-prop tcp PROTO PROPERTY FAMILY PERM VALUE DEFAULT POSSIBLE tcp largest-anon-port -- rw 65535 65535 1024-65535 tcp local-dack-interval -- rw 50 50 10-500 tcp local-dacks-max -- rw 8 8 0-16 tcp push-timer-interval -- rw 50 50 0-100 : : Example 9. Configuring reasm-timeout for 'ip' protocol module reasm-timoeut: Specifies the reassembly fragment timeout value, that is, amount of time IP fragments are held while waiting for missing fragments. # ipadm set-prop -p reasm-timeout=45000 ip Sets the reasm-timeout to 45 seconds for both IPv4 and IPv6 packets. To set different values for IPv4 and IPv6 use -f flag. # ipadm set-prop -f inet -p reasm-timeout=15 ip # ipadm set-prop -f inet6 -p reasm-timeout=45 ip # ipadm show-prop -p reasm-timeout ip PROTO PROPERTY FAMILY PERM VALUE DEFAULT POSSIBLE ip reasm-timeout inet rw 15000 15000 5000-255000 ip reasm-timeout inet6 rw 60000 60000 5000-255000 ATTRIBUTES See attributes(5) for descriptions of the following attributes: /sbin ____________________________________________________________ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | |_____________________________|_____________________________| | Availability | SUNWcsr | |_____________________________|_____________________________| | Interface Stability | Committed | |_____________________________|_____________________________| SEE ALSO ifconfig(1M), ndd(1M), dladm(1M), zonecfg(1M), attributes(5), nsswitch.conf(4), arp(1M), dhcp(5), vni(7D), in.ndpd (1M) Postel, J., RFC 791, Internet Protocol - DARPA Internet Program Protocol Specification, Information Sciences Institute, University of Southern California, September 1981. Hinden, R. and S. Deering, "IP Version 6 Addressing Architecture", RFC 4291, February 2006. Thomson, S., Narten, T., and T. Jinmei, "IPv6 Stateless Address Autoconfiguration", RFC 4862, September 2007. Droms, R., Bound, J., Volz, B., Lemon, T., Perkins, C., and M. Carney, "Dynamic Host Configuration Protocol for IPv6 (DHCPv6)", RFC 3315, July 2003. Narten, T., Draves, R., and S. Krishnan, "Privacy Extensions for Stateless Address Autoconfiguration in IPv6", RFC 4941, September 2007.