OpenSolaris IP Filter is managed by the SMF services svc:/network/pfil and svc:/network/ipfilter. For a complete overview of SMF, see Chapter 18, Managing Services (Overview), in System Administration Guide: Basic Administration. For information on the step-by-step procedures that are associated with SMF, see Chapter 19, Managing Services (Tasks), in System Administration Guide: Basic Administration.
OpenSolaris IP Filter requires direct editing of configuration files.
OpenSolaris IP Filter is installed as part of OpenSolaris. By default, OpenSolaris IP Filter is not activated after a fresh install. To configure filtering, you must edit configuration files and manually activate OpenSolaris IP Filter. You can activate filtering by either rebooting the system or by plumbing the interfaces using the ifconfig command. For more information, see the ifconfig(1M) man page. For the tasks associated with enabling OpenSolaris IP Filter, see Configuring Oracle Solaris IP Filter.
To administer OpenSolaris IP Filter, you must be able to assume a role that includes the IP Filter Management rights profile, or become superuser. You can assign the IP Filter Management rights profile to a role that you create. To create the role and assign the role to a user, see Configuring RBAC (Task Map) in System Administration Guide: Security Services.
IP Network Multipathing (IPMP) supports stateless filtering only.
Sun Cluster configurations do not support filtering with OpenSolaris IP Filter.
Filtering between zones is not currently supported with OpenSolaris IP Filter.