jason123onirc: well, that depends. if you're using exclusive-ip zone mine looks something like this (I didn't set the mac, it did that on it's own): dpaste.org/65bo1

in your case, global-nic is going to be your physical nic

(the VM I pulled that from used an etherstub)

I'm afraid I don't know the other types though

oninoshiko: I used 10.0.1.1 because that is what I saw online but is it better to use 192.168.2.1 instead

you just need to use whatever your network is useing

both are nonroutable IPs, so they'll need to be NATed

When is the r54 freeze?

So if my network is 192.168.1.1 then I can use 192.168.2.1 for the zone?

depends on you netmask and if you want internet access (given that your IP router offerst to route 192.168.1.1 to 192.168.1.254 to the internet

/n/13

I want internet on the zone but want it to be on its own internal ip

jason123onirc: really depends on how the rest of your network is set up. what you'd do on a typical home network with ISP router might differ from what you'd do on a VPS or colo'ed machine in a datacenter.

yeah that makes sense

on a home network, it's perhaps easiest to create a vnic over your physical nic and let it get an address via dhcp from your router outside the box.

so I have to give it an ip that my router can control?

you could also put the zone's vnic on an etherstub and have the global zone act as NAT for the non-global zone(s)

what ip would I use if i want to do nat?

jason123onirc: again, depends on your home network config. if you can control the range of addresses given out by your router's DHCP server you can statically assign an address outside the router's pool.

jason123onirc: if you want to do double-nat (with nat on your router and again on your global zone) you could pick any rfc1918 subnet not used by your existing network.

(rfc1918 = 192.168.0.0/16, 172.16.0.0/12, 10.0.0.0/8 and smaller subnets of those networks)

I have it set as

"allowed-address" : "192.168.0.101/16",

"defrouter" : "192.168.0.0",

but its not giving the zone internet access

what physical nic is the zone's vnic on top of?

defrouter shouldn't be set in zonecfg for an exclusive stack zone; you have to set the zone and route from inside the zone

excuse me, you have to set the address and route from inside the zone (either ipadm static or dhcp)

192.168.0.0 doe not look like node address

that, too.

would it be 192.168.0.1?

yep

ok

or 192.168.1.254

first address is network, last is broadcast

or whatever your first-hop router's address is

and then i set it inside of the zone?

yes, zlogin to zone, and set with ipadm

my router is on 192.168.1.1 but i want to do nat on the zone

then you need to setup ipnat in the global zone, put the vnic on top of an etherstub, give the global zone an address on the etherstub, turn on ip forwarding, and point the zone's default route at the global zone's address on the etherstub

i try to create a static ip from inside the zone and it says

ipadm: Could not create address: Operation not permitted on from-gz interface

what ip-type is configured in zone?

it says from-gz

you need to check from global zone, either zonecfg -z zonename info or see from xml file:)

If I set a allowed address outside of my dhcp then it fails but I will try if it works to configure it inside the zone

I am just trying to get internet access working