Routing Prerequisites

Before you install SunScreen, make sure the machine can route traffic properly:

• Each interface connects to a different subnet

• Network traffic routes correctly between the individual subnets

• System can forward packets between interfaces

• Kernel global variable ip_forwarding is set to 1

To set this variable to 1, type:

# ndd -set /dev/ip ip_forwarding  1

See the ip(7P) Solaris man page for more details.

If you are using SunScreen 3.2 Lite, you must set this variable to 0, or your Screen will be limited to two routing interfaces.