xref: /illumos-gate/usr/src/cmd/tsol/tnctl/tnzonecfg (revision 5d3b8cb7)
1f875b4ebSrica#
2f875b4ebSrica# CDDL HEADER START
3f875b4ebSrica#
4f875b4ebSrica# The contents of this file are subject to the terms of the
5f875b4ebSrica# Common Development and Distribution License (the "License").
6f875b4ebSrica# You may not use this file except in compliance with the License.
7f875b4ebSrica#
8f875b4ebSrica# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9f875b4ebSrica# or http://www.opensolaris.org/os/licensing.
10f875b4ebSrica# See the License for the specific language governing permissions
11f875b4ebSrica# and limitations under the License.
12f875b4ebSrica#
13f875b4ebSrica# When distributing Covered Code, include this CDDL HEADER in each
14f875b4ebSrica# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15f875b4ebSrica# If applicable, add the following below this CDDL HEADER, with the
16f875b4ebSrica# fields enclosed by brackets "[]" replaced with your own identifying
17f875b4ebSrica# information: Portions Copyright [yyyy] [name of copyright owner]
18f875b4ebSrica#
19f875b4ebSrica# CDDL HEADER END
20f875b4ebSrica#
21f875b4ebSrica#
22*5d3b8cb7SBill Sommerfeld# Copyright 2009 Sun Microsystems, Inc.  All rights reserved.
23f875b4ebSrica# Use is subject to license terms.
24f875b4ebSrica#
25f875b4ebSrica#There are five fields separated by colon in this configuration file:
26f875b4ebSrica#First Field: 	Name for the corresponding zone.
27f875b4ebSrica#		It is used when zone is configured.
28f875b4ebSrica#
29f875b4ebSrica#Second Field: 	Label for the corresponding zone.
30f875b4ebSrica#		It is used to label the zone when zone is booted.
31f875b4ebSrica#		The label can be either hex label or  symbolic ones defined by
32f875b4ebSrica#		label_encodings files.
33f875b4ebSrica#
34f875b4ebSrica#Third Field:	Policy match level for non-transport traffic.
35f875b4ebSrica#		Currently unused.
36f875b4ebSrica#
37f875b4ebSrica#Fourth Field:	Multi-Level port configuration entry for private addresses.
38f875b4ebSrica#		mlp info is list of semicolon separated mlp configuration entry.
39f875b4ebSrica#		Each mlp configuration entry is specified by port/protocol.
40f875b4ebSrica#
41f875b4ebSrica#Fifth Field:	Multi-Level port configuration entry for shared address.
42f875b4ebSrica#		It only applies to global zones.
43f875b4ebSrica#
44f875b4ebSrica# This is the default global zone configuration.  Note that although this
45f875b4ebSrica# entry must have a label and match flag, neither is configurable by the user.
46f875b4ebSrica#
47f875b4ebSrica# Multilevel Port (MLP) specification:
48f875b4ebSrica#
49f875b4ebSrica#	MLP			PURPOSE
50f875b4ebSrica#	---			-------
51f875b4ebSrica#	111			Port Mapper
52*5d3b8cb7SBill Sommerfeld#	500			IKE (IPsec key management)
53f875b4ebSrica#	515			BSD Multilevel Printing
54f875b4ebSrica#	631			IPP Multilevel Printing
55f875b4ebSrica#	2049			NFSv4 server
56*5d3b8cb7SBill Sommerfeld#	4500			IKE NAT-T (IPsec/IKE nat traversal)
57f875b4ebSrica#	6000-6003		Multilevel Desktop
58f875b4ebSrica#
59*5d3b8cb7SBill Sommerfeldglobal:ADMIN_LOW:1:111/tcp;111/udp;500/udp;4500/udp;515/tcp;631/tcp;2049/tcp;6000-6003/tcp:6000-6003/tcp;500/udp;4500/udp
60