Secondary labeled zones are useful for isolating services in different zones, yet allowing the services to run at the same label. For more information, see Primary and Secondary Labeled Zones.
Before You Begin
The primary zone must exist. The secondary zone must have an exclusive IP address and cannot require a desktop.
You must be in the root role in the global zone.
You can use the command line or the Labeled Zone GUI, txzonemgr.
# tncfg -z secondary-label-service primary=no # tncfg -z secondary-label-service label=public
# txzonemgr &
Navigate to Create a new zone, and follow the prompts.
# tncfg -z zone info primary primary=no
In this example, the administrator isolates a public zone that is designed to run scripts and batch jobs.
# tncfg -z public-scripts primary=no # tncfg -z public-scripts label=public