System Administration Guide: IP Services


I

	ICMP protocol
		description ( )
		displaying statistics ( )
		invoking, with `ping` ( )
		messages, for Neighbor Discovery protocol ( )

	ICMP Router Discovery (RDISC) protocol ( )

	identity association ( )

	`ifconfig` command ( ) ( )
		6to4 extensions ( )
		`auth_algs` security option ( )
		checking order of STREAMS modules ( )
		configuring
			IPv6 tunnels ( )
			VLAN devices ( )
		controlling DHCP client ( )
		`deprecated` attribute ( )
		DHCP and ( )
		displaying interface status ( ) ( ) ( )
		displaying IPMP group ( )
		`encr_algs` security option ( )
		`encr_auth_algs` security option ( )
		`failover` option ( )
		`group` parameter ( ) ( )
		information in output ( )
		IPMP extensions to ( )
		IPsec security options ( )
		IPv6 extensions to ( )
		output format ( )
		plumbing an interface ( ) ( ) ( ) ( )
		`standby` parameter ( ) ( )
		syntax ( )
		`test` parameter ( )
		use as troubleshooting tool ( )

	`ignore_crls` keyword, IKE configuration file ( )

	IGP, See routing protocols

	IKE
		adding self-signed certificates ( )
		certificates ( )
		changing
			privilege level ( ) ( )
		checking if valid policy ( )
		command descriptions ( )
		configuration files ( )
		configuring
			for mobile systems ( )
			with CA certificates ( )
			with preshared keys ( )
			with public key certificates ( )
		creating self-signed certificates ( )
		`crls` database ( )
		daemon ( )
		databases ( )
		finding attached hardware ( )
		generating certificate requests ( )
		global zone ( )
		hardware acceleration ( )
		hardware storage of keys ( )
		`ike.preshared` file ( )
		`ike.privatekeys` database ( )
		`ikeadm` command ( )
		`ikecert certdb` command ( )
		`ikecert certrldb` command ( )
		`ikecert` command ( )
		`ikecert tokens` command ( )
		implementing ( )
		`in.iked` daemon ( )
		ISAKMP SAs ( ) ( )
		key management ( )
		managing using SMF ( )
		mobile systems and ( )
		NAT and ( ) ( )
		overview ( )
		perfect forward secrecy (PFS) ( )
		Phase 1 exchange ( )
		Phase 1 key negotiation ( )
		Phase 2 exchange ( )
		PKCS #11 library ( )
		preshared keys ( )
			viewing ( )
		privilege level
			changing ( ) ( )
			checking ( ) ( )
			description ( )
		`publickeys` database ( )
		reference ( )
		RFCs ( )
		security associations ( )
		service from SMF ( )
		SMF service description ( )
		storage locations for keys ( )
		troubleshooting transmission timing ( )
		using a Sun Crypto Accelerator board ( ) ( ) ( )
		using Sun Crypto Accelerator 1000 board ( )
		using Sun Crypto Accelerator 4000 board ( )
		using Sun Crypto Accelerator 6000 board ( )
		using UltraSPARC T2 processor ( )
		viewing
			preshared keys ( )

	`ike/config` file, See `/etc/inet/ike/config` file

	`ike.preshared` file ( ) ( )
		sample ( )

	`ike.privatekeys` database ( )

	`ike` service
		description ( ) ( )
		use ( )

	`ikeadm` command
		description ( ) ( )
		privilege level
			checking ( ) ( )

	`ikecert certdb` command
		`-a` option ( ) ( )

	`ikecert certlocal` command
		`-kc` option ( )
		`-ks` option ( )

	`ikecert certrldb` command, `-a` option ( )

	`ikecert` command
		`-A` option ( )
		`-a` option ( )
		`-T` option ( ) ( )
		`-t` option ( )
		description ( ) ( )

	`ikecert tokens` command ( )

	`in.dhcpd` daemon ( )
		debugging mode ( )
		description ( )

	`in.iked` daemon
		`-c` option ( )
		`-f` option ( )
		activating ( )
		description ( )
		privilege level
			checking ( ) ( )
		stop and start ( ) ( )

	`in.mpathd` daemon
		definition ( )
		probing rate ( )
		probing targets ( )

	`in.ndpd` daemon
		checking the status ( )
		creating a log ( )
		options ( )

	`in.rarpd` daemon ( )

	`in.rdisc` program, description ( )

	`in.ripngd` daemon ( ) ( )

	`in.routed` daemon ( )
		creating a log ( )
		description ( )
		space-saving mode ( )

	`in.telnet` daemon ( )

	`in.tftpd` daemon
		description ( )
		turning on ( )

	inactive rule sets, See Oracle Solaris IP Filter

	inbound load balancing ( )

	`inet_type` file ( )

	`inetd` daemon
		administering services ( )

	`inetd` daemon, checking the status ( )

	`inetd` daemon
		IPv6 services and ( )
		services started by ( )

	interactive mode, `ipseckey` command ( )

	interface, definition ( )

	interface ID
		definition ( )
		format, in an IPv6 address ( )
		using a manually-configured token ( )

	interfaces
		checking packets ( )
		configuring
			as part of a VLAN ( )
			in Solaris 10 1/06 ( )
			in Solaris 10 3/05 ( )
			into aggregations ( )
			IPv6 logical interfaces ( )
			manually, for IPv6 ( )
			plumbing ( )
			temporary addresses ( )
		displaying status ( ) ( ) ( )
		displaying status, Solaris 10 1/06 ( )
		failover, with IPMP ( )
		IPMP interface types ( )
		legacy interface types ( )
		multihomed hosts ( ) ( )
		naming conventions ( )
		non-VLAN interface types ( )
		order of STREAMS modules on an interface ( )
		pseudo-interface, for 6to4 tunnels ( )
		removing ( )
			in Solaris 10 1/06 ( )
		router configuration ( ) ( )
		standby, in IPMP ( ) ( )
		types, in Solaris 10 1/06 ( )
		types of NICs ( ) ( )
		types that support aggregations ( )
		verifying MAC address uniqueness ( )
		VLANs ( ) ( )
		VLANs, in Solaris 10 3/05 ( )

	Internet, domain name registration ( )

	Internet Assigned Numbers Authority (IANA), registration services ( )

	Internet drafts
		definition ( )
		SCTP with IPsec ( )

	Internet layer (TCP/IP)
		ARP protocol ( )
		description ( ) ( )
		ICMP protocol ( )
		IP protocol ( )
		packet life cycle
			receiving host ( )
			sending host ( )

	Internet Protocol (IP) ( )

	Internet Security Association and Key Management Protocol (ISAKMP) SAs
		description ( )
		storage location ( )

	internetworks
		definition ( )
		packet transfer by routers ( ) ( )
		redundancy and reliability ( )
		topology ( ) ( )

	InterNIC
		registration services
			domain name registration ( )

	interoperability
		IPsec with other platforms in tunnel mode ( )
		IPsec with other platforms using preshared keys ( )

	IP address
		`BaseAddress` label ( )
		care-of address ( )
		IP source address ( )
		mobile node ( ) ( )
		source IP address ( )

	IP addresses
		allocation with DHCP ( )
		designing an address scheme ( ) ( )
		DHCP
			adding ( )
			errors ( )
			modifying properties ( )
			properties ( )
			removing ( )
			reserving for client ( )
			tasks ( )
			unusable ( )
		displaying addresses of all interfaces ( )
		IP protocol functions ( )
		network classes
			network number administration ( )
		network interfaces and ( )
		subnet issues ( )

	IP datagrams
		IP header ( )
		IP protocol formatting ( )
		packet process ( )
		protecting with IPsec ( )
		UDP protocol functions ( )

	IP Filter, See Oracle Solaris IP Filter

	IP forwarding
		in IPv4 VPNs ( ) ( ) ( ) ( ) ( )
		in IPv6 VPNs ( ) ( ) ( ) ( ) ( ) ( )
		in VPNs ( )

	IP link, in IPMP terminology ( )

	IP network multipathing (IPMP), See IPMP

	IP protocol
		checking host connectivity ( ) ( )
		description ( )
		displaying statistics ( )

	IP security architecture, See IPsec

	`ip_strict_dst_multihoming`, preventing IP spoofing ( )

	`ipaddrsel` command ( ) ( )

	`ipaddrsel.conf` file ( ) ( )

	`ipf` command
		See also Oracle Solaris IP Filter
		`-6` option ( )
		`-a` option ( )
		`-D` option ( )
		`-E` option ( )
		`-F` option ( ) ( ) ( ) ( )
		`-f` option ( ) ( ) ( ) ( )
		`-I` option ( ) ( )
		`-s` option ( )
		append rules from command line ( )

	`ipf.conf` file ( )
		See Oracle Solaris IP Filter

	`ipfstat` command ( )
		See also Oracle Solaris IP Filter
		`-6` option ( )
		`-I` option ( )
		`-i` option ( ) ( )
		`-o` option ( ) ( )
		`-s` option ( )
		`-t` option ( )

	`ipgpc` classifier, See classifier module

	`ipmon` command
		See also Oracle Solaris IP Filter
		`-a` option ( )
		`-F` option ( )
		`-o` option ( )
		IPv6 and ( )

	IPMP
		administering ( )
		ATM support ( )
		basic requirements ( )
		data addresses ( )
		dynamic reconfiguration ( ) ( )
		Ethernet support ( )
		failover
			definition ( )
		failure detection
			definition ( )
		failure detection time ( )
		group configuration
			planning for an IPMP group ( )
			tasks for configuring ( )
			troubleshooting ( )
		`hostname.interface` file ( )
		interface configuration
			active-active ( )
			active-standby ( )
			standby interface ( ) ( )
			types of interface configurations ( )
		IP links, types of ( )
		IPMP configuration file ( )
		link-based failure detection ( )
		load spreading ( )
		multipathing group definition
			See IPMP group
		network drivers supported ( )
		overview ( )
		preserving configuration across reboots ( ) ( ) ( )
		probe-based failure detection ( )
		probe traffic ( )
		repair detection ( )
		replacing an interface not present at system boot ( )
		replacing interfaces, DR ( )
		software components ( )
		target systems ( )
			configuring in a script ( )
			configuring manually ( )
		terminology ( )
		test addresses ( )
		Token ring support ( )

	IPMP daemon `in.mpathd` ( )

	IPMP groups
		adding an interface to a group ( )
		adding interfaces, through DR ( )
		affect of interfaces not present at boot time ( )
		configuring ( )
		configuring a group for a single interface ( )
		displaying group membership ( )
		group failures ( )
		moving an interface between groups ( )
		NIC speed in a group ( )
		planning tasks ( )
		removing an interface from a group ( )
		removing interfaces, through DR ( ) ( )
		troubleshooting group configuration ( )

	`ipnat` command
		See also Oracle Solaris IP Filter
		`-C` option ( )
		`-F` option ( ) ( )
		`-f` option ( ) ( )
		`-l` option ( )
		`-s` option ( )
		append rules from command line ( )

	`ipnat.conf` file ( )
		See Oracle Solaris IP Filter

	`ipnodes.byaddr` map ( )

	`ipnodes.byname` map ( )

	`ipnodes` file ( ) ( )

	`ipnodes.org_dir` table ( )

	`ippool` command
		See also Oracle Solaris IP Filter
		`-F` option ( )
		`-f` option ( )
		`-l` option ( )
		`-s` option ( )
		append rules from command line ( )
		IPv6 and ( )

	`ippool.conf` file ( )
		See Oracle Solaris IP Filter

	IPQoS ( )
		configuration example ( ) ( )
		configuration file ( ) ( )
			`action` statement syntax ( )
			`class` clause ( )
			`filter` clause ( )
			initial action statement ( )
			initial `action` statement ( )
			list of IPQoS modules ( )
			marker `action` statement ( )
			syntax ( )
		configuration planning ( )
		Diffserv model implementation ( )
		error messages ( )
		features ( )
		man pages ( )
		message logging ( )
		network example ( )
		network topologies supported ( ) ( ) ( ) ( )
		policies for IPv6-enabled networks ( )
		QoS policy planning ( )
		related RFCs ( )
		routers on an IPQoS network ( )
		statistics generation ( )
		traffic management capabilities ( ) ( )
		VLAN device support ( )

	`ipqosconf` ( )

	`ipqosconf` command
		applying a configuration ( ) ( )
		command options ( )
		listing the current configuration ( )

	IPsec
		activating ( )
		adding security associations (SAs) ( )
		algorithm source ( )
		authentication algorithms ( )
		bypassing ( ) ( ) ( )
		commands, list of ( )
		components ( )
		configuration files ( )
		configuring ( ) ( )
		creating SAs manually ( )
		displaying policies ( )
		encapsulating data ( )
		encapsulating security payload (ESP) ( ) ( )
		encryption algorithms ( )
		`/etc/hostname.ip6.tun0` file
			configuring VPN ( ) ( )
		`/etc/hosts` file ( )
		`/etc/inet/ipnodes` file ( )
		extensions to utilities
			`ifconfig` command ( )
			`snoop` command ( ) ( )
		getting random numbers for keys ( )
		`hostname.ip.tun0` file
			configuring VPN ( )
		`ifconfig` command
			configuring VPN ( ) ( ) ( )
			security options ( )
		implementing ( )
		`in.iked` daemon ( ) ( )
		inbound packet process ( )
		interoperating with other platforms
			IP-in-IP tunnels ( )
			preshared keys ( ) ( )
		`ipsecalgs` command ( ) ( )
		`ipsecconf` command ( ) ( )
		`ipsecinit.conf` file
			bypassing LAN ( ) ( ) ( )
			configuring ( )
			description ( )
			policy file ( )
			protecting web server ( ) ( )
			removing IPsec bypass of LAN ( ) ( )
		`ipseckey` command ( ) ( ) ( )
		IPv4 VPN in tunnel transport mode, and ( )
		IPv4 VPNs, and ( )
		IPv6 VPN in tunnel transport mode, and ( )
		IPv6 VPNs, and ( )
		key management ( )
		keying utilities
			IKE ( )
			`ipseckey` command ( )
		logical domains and ( )
		managing using SMF ( )
		NAT and ( )
		outbound packet process ( )
		overview ( )
		policy command
			`ipsecconf` ( )
		policy files ( )
		protecting
			mobile systems ( )
			packets ( )
			VPNs ( )
			web servers ( )
		protecting a VPN ( ) ( )
		protection mechanisms ( )
		protection policy ( )
		RBAC and ( )
		replacing security associations (SAs) ( )
		RFCs ( )
		`route` command ( ) ( ) ( ) ( ) ( ) ( ) ( ) ( )
		SCTP protocol and ( ) ( )
		securing remote login ( )
		securing traffic ( )
		security associations (SAs) ( )
		security associations database (SADB) ( ) ( )
		security mechanisms ( )
		security parameter index (SPI) ( )
		security policy database (SPD) ( ) ( ) ( )
		security protocols ( ) ( )
		security roles ( )
		services
			`ipsecalgs` ( )
			`manual-key` ( )
			`policy` ( )
		services, list of ( )
		services from SMF ( ) ( )
		setting policy
			permanently ( )
			temporarily ( )
		`snoop` command ( ) ( )
		Solaris cryptographic framework and ( )
		specifying
			authentication algorithms ( )
			encryption algorithms ( )
		terminology ( )
		transport mode ( )
		tunnel mode ( )
		tunnels ( )
		using `ssh` for secure remote login ( )
		verifying packet protection ( )
		virtual private networks (VPNs) ( ) ( )
		zones and ( ) ( )

	IPsec policy
		example of tunnels in transport mode ( )
		example of using deprecated syntax ( )
		examples of tunnel syntax ( )
		IP-in-IP datagrams ( )
		LAN example ( )
		specifying ( ) ( )

	IPsec tunnels, simplified syntax ( )

	`ipsecalgs` service, description ( )

	`ipsecconf` command
		`-a` option ( )
		`-f` option ( )
		configuring IPsec policy ( )
		description ( )
		displaying IPsec policy ( ) ( )
		purpose ( )
		security considerations ( ) ( )
		setting tunnels ( )
		viewing IPsec policy ( )

	`ipsecinit.conf` file
		bypassing LAN ( ) ( )
		configuring tunnel options ( )
		description ( )
		location and scope ( )
		protecting web server ( ) ( )
		purpose ( )
		removing IPsec bypass of LAN ( ) ( )
		sample ( )
		security considerations ( )
		verifying syntax ( )

	`ipseckey` command
		description ( ) ( )
		interactive mode ( )
		purpose ( ) ( )
		security considerations ( )

	`ipseckeys` file, storing IPsec keys ( )

	IPv4 addresses
		applying netmasks ( ) ( )
		dotted-decimal format ( )
		format ( )
		IANA network number assignment ( )
		network classes ( )
			addressing scheme ( ) ( )
			class A ( )
			class B ( ) ( )
			class C ( )
		parts ( )
		range of numbers available ( )
		subnet issues ( )
		subnet number ( )
		symbolic names for network numbers ( )

	IPv6
		6to4 address ( )
		adding
			addresses to NIS ( )
			DNS support ( )
		address autoconfiguration ( ) ( )
		addressing plan ( )
		and Oracle Solaris IP Filter ( )
		ATM support ( )
		automatic tunnels ( )
		checking the status of `in.ndpd` ( )
		comparison with IPv4 ( ) ( )
		configuring tunnels ( )
		default address selection policy table ( )
		DNS AAAA records ( )
		DNS support preparation ( )
		dual-stack protocols ( )
		duplicate address detection ( )
		enabling, on a server ( )
		extension header fields ( )
		extensions to `ifconfig` command ( )
		`in.ndpd` daemon ( )
		`in.ripngd` daemon ( )
		known issues with 6to4 router ( )
		link-local addresses ( ) ( )
		monitoring traffic ( )
		multicast addresses ( ) ( )
		Neighbor Discovery protocol ( )
		neighbor solicitation ( )
		neighbor solicitation and unreachability ( )
		neighbor unreachability detection ( ) ( )
		next-hop determination ( )
		`nslookup` command ( )
		packet header format ( )
		protocol overview ( )
		redirect ( ) ( ) ( )
		router advertisement ( ) ( ) ( ) ( )
		router discovery ( ) ( )
		router solicitation ( ) ( )
		routing ( )
		security considerations ( )
		site-local addresses ( )
		stateless address autoconfiguration ( ) ( )
		subnets ( )
		temporary address configuration ( )
		troubleshooting common IPv6 problems ( ) ( )
		tunnels ( )

	IPv6 addresses
		address autoconfiguration ( ) ( )
		address resolution ( )
		anycast ( )
		interface ID ( )
		link-local ( )
		multicast ( )
		unicast ( )
		uniqueness ( )
		VPN example of use with IPsec ( )

	IPv6 features, Neighbor Discovery functionality ( )

	IPv6 link-local address, with IPMP ( )