How to add a public IP to solaris 8

[Iknowit101]

I need to add a Public IP to an interface on a SUN (Solaris 8) 420-R so it can be reached from outside, the internet.
Also need to make the changes to the Firewall so the internal ip can be resolved to the public ip so the box
can be reached from outside, right?
How do I do this?

Any sugestions or ideas? whitepapers or useful links on this subject will be greatly appreciated.

A newbie in trouble!







Thanks in advanced for your help.


It wasn't me, it was someone that looks a lot like me . . . .

 

[dbase77]

Hi,

If you have public ip on SUN box, why you want to resolve internal ip to public ip at your firewall box? You dont have to do that. Make sure firewall rules dont block any port that SUN box is running.

dbase77

 

[Iknowit101]

I "DON'T" have a public IP on the SUN box, I need to add one since I only have a private IP and want the box to be reached from outside.


It wasn't me, it was someone that looks a lot like me . . . .

 

[dbase77]

Hi,

Are you using static ip or dynamic ip for public ip? Get another network card and assign your public ip.

dbase77

 

[Iknowit101]

Thanks,
But I do know what I have to do, what I need to know is HOW to do it, any step by step instructions?
I am new to Solaris.

It wasn't me, it was someone that looks a lot like me . . . .

 

[dbase77]

Hi,

1)shutdown SUN machine.
2)install new card on empty slot. plugin your network cable as well.
3)boot SUN machine and stop at OK prompt (press ctrl + A).
4)type boot -r
5)login as root, check your new card installed. couple of way:
a) view /var/adm/messages
b) ndd /dev/ip ? (you should see at the end all your NIC) eg. eri0:ip_forwarding,hme0:ip_forwarding. eri0 and hme0 is your NIC device.
6) ifconfig plumb hme0
7) ifconfig -a (to check if new NIC show up)
8) ifconfig hme0 11.22.33.44 netmask 255.255.0.0 broadcast 11.22.255.255 up (assign ip and bring it up)
9) ifconfig -a (again to check the output of all NIC interface)

dbase77

 

[daFranze]

Stop, Stop, Stop!

You do not need another NIC nor another IP on your Sun!

You are already connected to the Internet, just some of your networkequipment does not allow the access (Firewall, Routers), all you need to do: allow access (open port, eg.

http://www to

your Sun AND switch on NAT (network adress translation) on your Firewall/Router/Packetfilter to translate your internalIP to a publicIP

I would suggest to put any machine accessible from the internet to a DMZ, a network only accessable via the Firewall; second harden the OS, just google the internet "Solaris hardening"

Regards
-- Franz
Sorry I'm not a native spaeker, I'm from Munich, Germany - "Home of the Whopper", oh no, "Home of the Oktoberfest" ;-)
Solaris System Manager; I used to work for Sun Microsystems Support (EMEA) for 5 years