Go to main content

Administering TCP/IP Networks, IPMP, and IP Tunnels in Oracle® Solaris 11.3

Exit Print View

Updated: March 2019

Modifying an IP Tunnel Configuration

You change a tunnel's configuration by using the following command syntax:

# dladm modify-iptun -a [local|remote]=addr,... tunnel-link

You cannot modify an existing tunnel's type. Thus, the –T type option is not allowed for this command. Only the following tunnel parameters can be modified:

–a [local|remote]=address,...

Specifies literal IP addresses or host names that correspond to the local address and the remote tunnel address. Depending on the type of tunnel, you specify either only one address, or both local and remote addresses. If you are specifying both local and remote addresses, you must separate the addresses with a comma.

  • IPv4 tunnels require local and remote IPv4 addresses to function.

  • IPv6 tunnels require local and remote IPv6 addresses to function.

  • 6to4 tunnels require a local IPv4 address to function.

For persistent IP tunnel datalink configurations, if you are using host names for addresses, these host names are saved in the configuration storage. During a subsequent system boot, if the names resolve to IP addresses that are different from the IP addresses that were used when the tunnel was created, then the tunnel acquires a new configuration.

If you are changing the tunnel's local and remote addresses, ensure that these addresses are consistent with the type of tunnel that you are modifying.

  • To change the name of the tunnel link, use the dladm rename-link command rather than the modify-iptun command as follows:

    # dladm rename-link old-tunnel-link new-tunnel-link
  • To change tunnel properties such as the hoplimit or encaplimit, use the dladm set-linkprop command rather than the modify-iptun command.

Example 35  Modifying a Tunnel's Address and Properties

The following example consists of two steps. The first command shows how to temporarily change the local and remote addresses of the IPv4 tunnel vpn0. Then, when the system is rebooted, the tunnel reverts to using the original addresses. The second command shows how to change the hoplimit of vpn0 to 60.

# dladm modify-iptun -t -a local=,remote= vpn0

# dladm set-linkprop -p hoplimit=60 vpn0