Network Administration for the Solaris 9 Operating Environment SA-399 Student Guide phần 10 docx

Identifying NTP Basics Uses of NTP Many network applications need synchronized clocks to properly function For example: q Encryption – This application often uses time as a component of encryption keys q Network management – This application uses time to determine exactly when something took place q Logging – The syslog utility uses time to display system events q File systems – This application timestamps files when they are created or modified NTP Terms Several terms are used when describing time-related topics These terms are described in Table 12-1 Table 12-1 NTP Terms Term Description Reference clock A clock that provides current time by accurately following a time standard, such as Universal Time Coordinate (UTC) Strata NTP servers are arranged in a hierarchy of levels, called strata A stratum-1 server is more accurate than a stratum-10 server There are 15 strata Stratum-1 server A highly available NTP server that has its own reference clock Resolution The smallest increment in time that a clock offers For example, a wristwatch usually has a resolution of one second Precision The smallest increase in time that a computer program can use Jitter The difference of the differences experienced when repeatedly measuring time Accuracy How close a clock follows an official time reference, such as UTC Configuring NTP Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A 12-3 Identifying NTP Basics Table 12-1 NTP Terms (Continued) Term Reliability The length of time that a clock can remain accurate within a specified range Wander All clocks suffer from frequency variations This variation is called wander Drift file A file that contains the frequency offset of the local system’s clock oscillator Drift file contents can be used by protocols, like NTP, to cause a system’s clock to be more accurate The default location for Sun’s NTP drift file is /var/ntp/ntp.drift xntpd The NTP daemon The ntp.conf file A file that causes the xntpd daemon to start in either the client or the server mode and provides configuration statements that control the behavior of the xntpd daemon The fudge utility You can use the fudge utility in the ntp.conf file as a keyword to configure reference clocks in special ways, such as defining calibration constants to force a time offset to a particular external time standard Discipline 12-4 Description A general term used for various actions carried out by some protocol, which helps keep a local clock better synchronized to an official time source, such as UTC Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Configuring an NTP Server Configuring an NTP Server The /etc/inet/ntp.server file is a template for configuring an NTP server Copy this file to /etc/inet/ntp.conf, and edit it to meet your network’s requirements When viewing the ntp.server file contents, remember that an NTP server is also an NTP client The /etc/rc2.d/S74xntpd file is read at system boot time and starts the xntpd process if the /etc/inet/ntp.conf file exists The xntpd process starts in either the client or the server mode, depending on the contents of the ntp.conf file The following steps describe the xntpd process The NTP servers advertise every 64 seconds, by means of a multicast address (224.0.1.1), that they are NTP servers Any NTP client that is not configured with the unicast address of an NTP server multicasts when the xntpd process starts View the line that causes the system to act as an NTP server by typing the following: sys11# grep broadcast /etc/inet/ntp.server broadcast 224.0.1.1 ttl sys11# Local NTP servers answer the multicast advertisements The NTP client sends request packets to all the NTP servers that are using their unicast addresses Included in the request packet is the client’s local time The NTP server replies by inserting UTC time into the packet and then returns the packet to the client The client compares its original request time with its own time when it receives the response from the server This allows the client to determine how long the packet was in transit on the network The client uses the UTC time value from the NTP server after it receives several responses from the NTP server It can take up to five minutes for an NTP client to synchronize with an NTP server Configuring NTP Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A 12-5 Configuring an NTP Server Table 12-2 shows the parts of an NTP server’s configuration file and their descriptions Table 12-2 NTP Configuration File Parts Part Description server 127.127.1.0 prefer The IP address of the preferred NTP server In this case, the loopback address is used, indicating the use of a local undisciplined clock The server keyword indicates an IP address of an NTP server from which time will be received If the system happens to be a stratum-1, then you use X in the 127.127.X.0 syntax to identify a reference clock source If the server is a stratum-2 (or higher), this entry would be an IP address of another NTP server to contact for time information The prefer keyword means that if multiple systems of the same strata are used to getting clock information, a preferred server is the one that will always be used when performing calculations fudge 127.127.1.0 stratum The fudge entry is available to change (fudge) the stratum that the server advertises broadcast 224.0.1.1 ttl The address the server uses to advertise to the network along with the time-to-live (TTL) value to use in the IP datagrams enable auth monitor The configuration entry that enables authentication and the monitoring facility driftfile /var/ntp/ntp.drift The location of the drift file statsdir /var/ntp/ntpstats/ The location of NTP statistics keys /etc/inet/ntp.keys The conventional name of the key file used for authentication trustedkey The encryption identifier (Refer to RFC 1305 for more information.) controlkey The key identifier (Refer to RFC 1305 for more information.) 12-6 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Configuring an NTP Server Note – Different types of facilities, such as loopstats or clockstats, can also be enabled (refer to the xntpd man page for more details) Using an Undisciplined Local Clock NTP servers can, but should not, use their own undisciplined local clock as an official, reliable time source To use an undisciplined local clock, complete the following steps: Copy the /etc/inet/ntp.server file to the /etc/inet/ntp.conf file sys22# cp /etc/inet/ntp.server /etc/inet/ntp.conf sys22# Open the /etc/inet/ntp.conf file for editing, and change the server IP address to 127.127.1.0, where the number represents the undisciplined local clock Comment out the fudge keyword because special configuration is not needed for the local reference clock sys22# vi /etc/inet/ntp.conf Change: server 127.127.XType.0 prefer fudge 127.127.XType.0 stratum to: server 127.127.1.0 prefer # fudge 127.127.XType.0 stratum Note – Choices for XType are listed in the comments of the /etc/inet/ntp.server file Create a drift file as specified by the drift file /var/ntp/ntp.drift entry in the /etc/inet/ntp.conf file sys22# touch /var/ntp/ntp.drift sys22# Configuring NTP Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A 12-7 Configuring an NTP Server Note – The xntpd daemon dynamically establishes the drift file contents Verify that the file exists sys22# ls -al /var/ntp/ntp.drift -rw-r r-1 root other sys22# Dec 27 00:57 /var/ntp/ntp.drift Start the NTP daemon by using the xntpd script in the /etc/init.d directory sys22# /etc/init.d/xntpd start sys22# Verify that the NTP daemon is running sys22# pgrep -lf ntp 1585 /usr/lib/inet/xntpd sys22# Use the snoop utility to view NTP server multicast advertisements sys22# /usr/sbin/snoop | grep -i ntp Using device /dev/le (promiscuous mode) sys22 -> 224.0.1.1 NTP broadcast (Thu Dec 27 01:03:28 2001) sys22 -> 224.0.1.1 NTP broadcast (Thu Dec 27 01:04:32 2001) sys22 -> 224.0.1.1 NTP broadcast (Thu Dec 27 01:05:36 2001) Note – Notice the 64-second interval between NTP advertisements sent out This is due to the NTP polling value of 6; 26 is 64 The polling value can be seen with the snoop -v command Configure the Stratum You can manually configure the stratum of an NTP server by editing the fudge entry in the ntp.conf file This is useful when you not have access to an external NTP server and you have to manually synchronize with another system Systems that use their internal clock advertise themselves as stratum-4 servers 12-8 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Configuring an NTP Server When a local clock is configured to act as an accurate source of time, NTP will detect this Systems that use their own clock as a time source will advertise themselves as a stratum-4 server by default However, the fudge keyword could be used to alter this behavior The fudge configuration entry can use the stratum option to override the stratum level sent out with the NTP server’s time advertisements Using External NTP Reference Servers Determine which NTP servers are reachable by your NTP server Refer to http://www.eecis.udel.edu/~mills/ntp/clock2.htm for a list of stratum-2 servers You must notify the NTP server’s administrators of your intention to use their NTP server as a reference server so the administrator can properly size NTP servers for the additional NTP load To use external NTP reference servers, complete the following steps: Copy the /etc/inet/ntp.server file to the /etc/inet/ntp.conf file sys21# cp /etc/inet/ntp.server /etc/inet/ntp.conf sys21# Open the /etc/inet/ntp.conf file for editing, and change the server entry Comment out the fudge keyword because special configuration is not needed for an external reference clock sys21# vi /etc/inet/ntp.conf Change: server 127.127.XType.0 prefer fudge 127.127.XType.0 stratum to: server external-time-server-a server external-time-server-b server external-time-server-c # fudge 127.127.XType.0 stratum Create a drift file as specified by the driftfile /var/ntp/ntp.drift entry in the /etc/inet/ntp.conf file sys21# touch /var/ntp/ntp.drift sys21# Verify that the file exists sys21# ls -al /var/ntp/ntp.drift -rw-r r-1 root other sys21# Dec 27 01:41 /var/ntp/ntp.drift Configuring NTP Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A 12-9 Configuring an NTP Server Start the NTP daemon by using the xntpd script in the /etc/init.d directory sys21# /etc/init.d/xntpd start sys21# Check to see if the NTP daemon is running sys21# pgrep -lf ntp 1595 /usr/lib/inet/xntpd sys21# Managing Daemons By default, all NTP messages are sent to the syslog utility To view the logged information in pseudo real-time, use the tail utility with the follow (-f) option For example: sys22# tail -f /var/adm/messages Dec 27 01:25:37 sys22 xntpd[1614]: [ID 450285 daemon.error] makes a poor control keyid You can query or configure a running xntpd process by using the xntpdc utility, which was introduced in the Solaris OE The xntpdc utility provides an extensive xntpd state You can use statistic information in the interactive or the command-line mode The NTP service is automatically started at boot time if the /etc/inet/ntp.conf file exists You can manually stop the service by using the /etc/init.d/xntpd run script with stop as an argument To stop the daemon, perform the command: sys23# /etc/init.d/xntpd stop sys23# To start the daemon, perform the command: sys23# /etc/init.d/xntpd start sys23# 12-10 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Configuring an NTP Server Determining NTP Peers The ntpq utility is the standard NTP query program Use the utility to identify NTP peers on the network For example: sys22# ntpq ntpq> peers remote refid st t when poll reach delay offset disp ============================================================================== *LOCAL(0) LOCAL(0) l 36 64 377 0.00 0.000 10.06 224.0.1.1 0.0.0.0 16 64 0.00 0.000 16000.0 ntpq> ntpq> exit sys22# Configuring NTP Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A 12-11 Configuring an NTP Client Configuring an NTP Client Configuration of an NTP client also requires the /etc/inet/ntp.conf file to be established, as it does with NTP servers Establishing Basic Configuration To initialize the file configuration, complete the following steps: Copy the /etc/inet/ntp.client file to the /etc/inet/ntp.conf file sys23# cp /etc/inet/ntp.client /etc/inet/ntp.conf sys23# The /etc/inet/ntp.conf file contains only one entry, by default, that configures the client to use the default multicast address to solicit for servers sys23# tail -1 /etc/inet/ntp.client multicastclient 224.0.1.1 sys23# Check if the NTP daemon is running sys23# pgrep -lf ntp sys23# Start the NTP daemon by using the xntpd script in the /etc/init.d directory sys23# /etc/init.d/xntpd start sys23# The xntpd startup script initially uses the ntpdate utility to synchronize the client’s clock to UTC time After the ntpdate utility has accomplished this, the xntpd process is started by the xntpd script to maintain synchronization sys23# pgrep -lf ntp 1679 /sbin/sh /etc/init.d/xntpd start 1680 /usr/sbin/ntpdate -s -w -m 224.0.1.1 sys23# Note – The xntpd script remains in a wait state until the ntpdate utility completes The ntpdate utility automatically runs to gather NTP inputs and sets the initial time on this system The ntpdate utility might perform this initial setting by means of a step or a slew Refer to the ntpdate man page for further details 12-12 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A UTP Unshielded twisted-pair V VLAN Virtual local area network VLSM Variable length subnet mask W WAN (wide area network) WANs are slower-speed networks typically used by organizations to connect their local area networks WANs are often built from leased telephone lines capable of moving data at speeds of 56 kilobits/second to 1.55 megabits/second A WAN might be used to bridge a company’s office on two opposite ends of town or on opposite ends of a continent Glossary-16 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index Numerics 1000BASE-CX media system 2-13 1000BASE-LX media system 2-13 1000BASE-SX media system 2-13 1000BASE-T media system 2-13 100BASE-FX media system 2-12 100BASE-T4 media system 2-12 100BASE-TX media system 2-11 10BASE-2 media system 2-11 10BASE-5 media system 2-11 10BASE-T media system 2-11 A access list 10-23 access method, Ethernet 3-2 add_install_client script 11-80 addif option 5-19 address aggregatable global 8-6 broadcast 3-7, 5-8 Class A 5-7 Class B 5-8 Class C 5-8 classful 5-7 define test 8-50 detecting duplicates 8-9 embedded IPv4 8-12 Ethernet 3-6 host number 5-7 IP 5-7 IPv4 5-7 IPv6 anycast 8-5 multicast 8-4 representation 8-5 types 8-4 unicast 8-4 link-local 8-5 loopback type 8-12 multicast 3-7, 5-9, 8-6 network number 5-7 scope bits 8-14 site-local 8-5 test 6-5 unicast 3-7, 5-7 unspecified type 8-12 address-to-name translation 10-21, 10-22 aggregatable global address 8-6, 8-11 anycast address 8-5 Application layer common protocols 1-8 description 1-4, 1-8 Ethernet 3-11 formatting data 1-9 functions 1-9 presenting data 1-9 transporting data 1-9 Index-1 Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A ARP adding entries from a file 4-6 adding permanent table entries 4-5 adding table entries 4-6 cache 4-4 cache management 4-4 cache times 4-4 control table entries 4-4 deleting table entries 4-6 description 1-12, 4-2 display table entries 4-4 Ethernet frame 4-2 fields in table 4-5 operation 4-2 process 4-3 removing static entries 4-6 removing table entries 4-6 searching for new cache entries 4-6 table 4-4 table entries 4-4 TCP/IP model 4-2 time to live 4-5 arp utility 4-4 ASCII 1-9 autonomous system 7-6 B banner command 3-8 BASE 2-9 baseband 2-9 BGP 7-8 BIND 10-21 Border Gateway Protocol (BGP) 7-8 bridges 2-14 bridging devices 2-14 broadcast addresses 3-7, 5-8 buffered transfer 9-11 bus configurations 2-2 C capture network packets 3-15 carrier sense 3-2 Index-2 carrier sense multiple access/collision detection See CSMA/CD changing host name 5-15 CIDR block 7-29 netmask 7-29 operation 7-28 purpose 7-28 Class A address 5-7 Class B address 5-8 Class C address 5-8 classful address 5-7 classless inter-domain routing See CIDR client class 11-81 CNAME record 10-20 coaxial cable 2-10 collision detection 3-2 rates 3-4 collision rates 3-4 commands banner 3-8 eeprom 3-8 ndd 4-4 route 7-14 communication architecture 1-2 computers keeping time 12-2 networking fundamentals 1-2 configuration errors file 10-28 configuring default route 7-16 DHCP address 11-29 to 11-36 initial 11-17, 11-28 server 11-8 to support JumpStart clients 11-80 DHCP client 11-37 DNS client 10-26 server 11-65, 11-66 dynamic DNS 11-64 dynamic routing 7-23 host-to-host tunnel 8-70 interface for IPv6 8-18 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A IPMP at boot time 8-57 manually 8-47 IPv6 autoconfiguration 8-2, 8-7 interfaces 8-22 multipathing 8-47 name service lookup 8-19, 8-23 on non-router 8-17 router 8-22 IPv6-over-IPv4 tunnels 8-70 JumpStart to support DHCP JumpStart 11-106 logical interfaces 5-17, 8-29 multipathing 6-7 ndpd.conf file 8-23 NTP client 12-12 NTP server 12-5 router troubleshooting 7-37 routing at boot time 7-32 without rebooting 7-34 secondary DNS server 10-25 static direct route 7-16 static route 7-16 static route manually 7-18 stratum of a NTP server 12-8 troubleshooting routers 8-26 connectionless communication 1-8 connection-oriented communication 1-8 connection-oriented protocol 9-3 connections, full-duplex and virtual circuit 9-11 contiguous netmask 5-11 contiguous subnet masks 5-11 CRC 1-5 creating DHCP tables 11-11 CSMA/CD Ethernet access method 3-2 structure 3-3 cyclical redundancy check (CRC) 1-5 D daemons /usr/sbin/in.routed 7-25 in.dhcpd 11-4 in.mpathd 6-5, 6-18, 8-55 in.ndpd 8-16, 8-21 in.rarpd 4-7, 4-9 in.ripngd 8-21 in.routed 7-17 xntpd 12-8 data communication 1-2 data encapsulation 1-11, 4-2 data format 1-2 data transfer 1-2 database snapshot 10-31 datagram connectionless delivery of 5-2 header fields 5-5 IP 5-5 IP fields 5-5 payload 5-6 debug level 10-31 default route 7-4, 7-16 define test address 8-50 destination IP address 7-12 network 7-15 network number 7-12 DHCP adding table entries 11-11 address configuration 11-29, 11-36 client functions 11-3 configuration file 11-6 configuring client 11-37 JumpStart 11-86 to 11-105 JumpStart clients 11-80 servers 11-6, 11-8 creating tables 11-11 debug mode 11-77 description 1-13 dhcptab table 11-13 functionality 11-2 fundamentals 11-2 graphical manager 11-7 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-3 initial configuration 11-17 to 11-28 JumpStart 11-80 managing tables 11-10 manually acquiring lease 11-78 server 10-23 server functions 11-4 status of client 11-79 symbols 11-83 traffic 11-75 troubleshooting client host name 11-72 clients 11-72 server 11-68 vendor client class 11-81 dhcp_network file 11-9 dhcpconfig utility 11-7 dhcpmgr utility 11-7 dhcptab table 11-13 dhtadm utility 11-13 direct route 7-3 directory, /tftpboot 4-9 discover routers 8-16 diskless clients 4-7 displaying ARP data 4-4 ARP table entries 4-5 IPv6 route table 8-29 route table 7-9 state of IPv6 interfaces 8-28 distance-vector algorithms 7-8, 7-23 DNS access list 10-23 allow-query BIND file 10-23 allow-transfer BIND file 10-23 configuring dynamic 11-64 configuring server 10-25 configuring the client 10-26 database snapshot 10-31 debug option 11-67 description 1-13 dynamic updates 10-23 restricting queries 10-24 reverse-domain file 10-21 security 10-23 server 10-22 Index-4 server configuration 11-65 troubleshooting the server 10-28 Domain Name System See DNS drift file 12-7 duplicate address detection 8-9 Dynamic Host Configuration Protocol See DHCP dynamic route 7-4 dynamic routing, configuring 7-23 E EBCDIC 1-9 EEPROM 3-8 eeprom command 3-8 EGP 7-7, 7-8 electrically erasable programmable read-only memory (EEPROM) 3-8 embedded IPv4 address 8-12 enabling IPv6 8-16 encapsulating control information 3-12 Ethernet access method 3-2 address mapping 4-4 addresses 3-6 Application layer 3-11 ARP 4-2 changing the address 3-9 displaying the address 3-8 displaying the state 3-4 elements 3-2 frame encapsulation 3-11 frame header information 3-15 frames 3-2, 3-6, 3-10 Hardware layer 3-11 permanent change to address 3-9 statistics 3-4 switches 2-15 topology 3-3 viewing the address 3-8 Ethernet frames bad CRC 3-14 error conditions 3-14 giant 3-14 jabbers 3-14 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A long 3-14 runts 3-14 Ethernet-II frames 3-10 exterior gateway protocol (EGP) 7-7, 7-8 F failback 6-4 failover 6-2 FAILURE_DETECTION_TIME variable 6-6 features of a protocol stack 1-3 File Transfer Protocol (FTP) 1-8, 1-13 files /etc/default/dhcp 11-6 /etc/default/mpathd 6-4, 6-6, 6-18, 8-55 /etc/defaultrouter 6-5, 7-4, 7-17 /etc/ethers 4-9 /etc/gateways 7-17 /etc/hostname.hme0 5-19 /etc/hostname.interface 5-14, 5-15 /etc/inet/dhcpsvc.conf 11-6 /etc/inet/hosts 3-18, 4-9, 5-15 /etc/inet/ipsecinit.conf 8-3 /etc/inet/netmasks 5-11 /etc/inet/networks 7-14 /etc/inet/ntp.conf 12-7, 12-10 /etc/inet/ntp.server 12-5 /etc/init.d/inetinit 3-21 /etc/named.conf 10-23 /etc/net/hosts 5-14 /etc/net/ticlts/hosts 5-15 /etc/net/ticots/hosts 5-15 /etc/net/ticotsord/hosts 5-15 /etc/netmask 5-11 /etc/nodename 5-15 /etc/nsswitch.conf 4-9 /etc/rc2.d files /etc/rc3.d 3-21 /etc/rc2.d/S74xntpd 12-5 /usr/include/netinet/ip_icmp.h 5-3 /usr/sbin/ipsec.conf 8-3 /var/adm/messages 10-28 /var/named/loopback_domain_info 10-22 /var/ntp/ntp.drift 12-7 dhcp_network 11-9 interface configuration 5-14 loopback-domain-info 10-26 ndpd.conf 8-23 ntp.conf 12-8 one-backup 10-26 one-rbackup 10-26 flow control 9-12 flushing route table 7-20 format prefix 8-5 formatting data, Application layer functions 1-9 fragment size 5-2 fragmentation 5-2 frame check sequence 3-14 frame encapsulation 3-11 frames, Ethernet 3-2 framing packets 1-5 FTP 1-8, 1-13 fudge entry 12-8 full-duplex connection 9-11 transmission 3-4 full-duplex transmission 3-4 function, \? 3-20 G group membership 8-15 H half-duplex transmission 3-4 hardware address 4-4 Hardware layer, Ethernet 3-11 header fields, IP 5-6 hme driver 3-19 hme interfaces 3-20 hme0 interface 3-20, 5-14 hold-down state 7-24 hop count 7-23 hop-count limit 7-24 host alias 10-20 host name, changing 5-15 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-5 host nickname 10-20 host-based addressing media 3-6 host-based approach, Ethernet addresses 3-6 host-to-host tunnel 8-70 HTTP 1-14 http 1-4, 12-9 hubs intelligent 2-3 non-intelligent 2-3 shared 2-14 Hypertext Transfer Protocol (HTTP) 1-14 I IANA 5-7 ICMP definition 5-2 description 1-12 error detection 1-6 error message 7-12 functions 5-2 message types 5-3 message-type file 5-3 purpose 5-2, 5-3 redirect 7-26 routing data 1-6 ICMPv6 group membership 8-15 IEEE 802.3 standard 2-10, 3-2 IEEE identifiers 2-9 if_mpadm utility 6-20 ifconfig utility addif option 5-19 configuring logical interfaces 5-17, 5-18 unconfiguring logical interfaces 5-20 viewing the MTU of an interface 5-2 IGP 7-6 IMAP4 1-14 in.dhcpd daemon 11-4 in.mpathd daemon failure detection 6-6 multipath group 6-5 repair detection 6-6 starting 6-18, 8-55 in.ndpd daemon 8-16, 8-21 Index-6 in.rarpd daemon 4-7, 4-9 in.rdisc process 7-21 in.ripngd daemon 8-21 in.routed daemon 7-17 incrementing interface number 5-19 indirect route 7-3 initializing multihomed host 7-34 non-router 7-36 input errors, network system 3-5 instance of hme interface 3-20 instance parameter 3-20 Institute of Electrical and Electronics Engineers, Inc (IEEE) identifiers 2-9 intelligent hubs 2-3 interface configuration files 5-14 interface failure definition 6-6 interface identifier 8-7 interface identifier calculation 8-8 interface repair definition 6-6 interfaces hme 3-20 hme0 3-20 logical 5-16 virtual 5-16 Internet Assigned Numbers Authority (IANA) 5-7 Internet Control Message Protocol See ICMP Internet Gateway Protocol (IGP) 7-6 Internet layer description 1-4, 1-6 functions 1-6 ICMP 1-6 IP 1-6 Internet Message Access Protocol version (IMAP4) 1-14 Internet Protocol See IP IP address mapping 4-4 address types 5-7 datagram 5-2, 5-5, 7-12 datagram header fields 5-5 datagram payload 5-6 description 1-12 fragmenting data 1-6 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A header fields 5-6 ICMP 5-2 MTUs 5-2 purpose 5-2 routing 7-2 routing data 1-6 IP multipathing 6-2 IPMP configuring at boot time 8-57 definition 6-2 features 6-4 manual configuration 8-47 requirements 6-5 IPsec 8-3 IPv4 address shortage 8-2 addresses 5-7 tunnel troubleshooting 8-77 IPv6 address representation 8-5 address shortage 8-2 address types 8-4 aggregatable global address 8-6, 8-11 anycast address 8-5 authentication 8-3 autoconfiguration 8-2, 8-7 configure on non-router 8-17 configuring interfaces 8-18, 8-22 configuring multipathing 8-47 configuring name service lookup 8-19 displaying interfaces 8-28 displaying route table 8-29 embedded IPv4 address 8-12 enabling 8-16 expanded addressing 8-3 format prefix 8-5 interface troubleshooting 8-29 IPMP configuration 8-47 link-local address 8-5 managing 8-28 multicast address 8-4, 8-6 name service lookup 8-23 privacy header 8-3 RFC 8-2 RIP 8-21 router configuration 8-22 security 8-3 simplified header 8-2 site-local address 8-5 stateful autoconfiguration 8-7 stateless autoconfiguration 8-7 tunnels 8-70 unicast address 8-4 IPv6-over-IPv4 tunnels 8-70 J jump start, testing 11-107 JumpStart software clients 4-7 configuring DHCP server 11-80 configuring server 11-106 L LAN media 2-9 network devices 2-14 link speed 3-20 link-local address 8-5, 8-10 link-state protocol 7-8 localhost entry 7-16 local-mac-address? variable 3-8 logical interfaces administering 5-16 configuring 5-17, 8-29 description 5-16 incrementing 5-19 removeif option 5-20 unconfiguring 5-20 loopback address type 8-12 loopback interface 3-13 loopback-domain-info file 10-26 M MAC address banner command 3-8 files 4-9 ifconfig utility 3-8 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-7 setting 3-8 viewing 3-8 managing DHCP tables 11-10 IPv6 8-28 NTP client daemons 12-13 NTP daemons 12-10 mappings to host names 10-19 maximum transfer unit See MTU media access control address See MAC address media systems 1000BASE-CX 2-13 1000BASE-LX 2-13 1000BASE-SX 2-13 1000BASE-T 2-13 100BASE - TX 2-11 100BASE-FX 2-12 100BASE-T4 2-12 10BASE-2 2-11 10BASE-5 2-11 10BASE-T 2-11 messages, ICMP 5-3 monitoring route table changes 7-19 MTU data size 3-13 description 3-13 fragmentation 5-2 Internet layer 5-2 maximum frame size 3-13 multicast address description 3-7, 5-9 format prefixes 8-6 IPv6 8-4 purpose 8-13 scope bits 8-14 multihomed host 7-34 multipath, viewing operation 6-20 multipathing configuring 6-7, 8-47 features 6-4 troubleshooting 6-22 multiple access 3-2 Index-8 N name daemon 10-31 name daemon control program (ndc) 10-32 name server 10-18 name service lookup 8-19, 8-23 name-service database 4-9 names-to-IP addresses 10-19 ndc utility 10-32 ndd parameters 3-20, 3-21 ndd utility 3-19, 3-20, 3-21, 4-4 NDP 8-16 ndpd.conf file 8-23 Neighbor Discovery Protocol (NDP) 8-16 netmask contiguous 5-11 definition 5-11 file 5-11 noncontiguous 5-12 netstat utility displaying collisions 3-4 displaying Ethernet interfaces 3-18 field descriptions 3-18 -i option 3-18 input and output errors 3-5 network devices bridges 2-14 hubs 2-14 LANs 2-14 switches 2-14 Network File System (NFS) 1-9 network interface card (NIC) 3-6, 6-2 Network Interface layer description 1-4 protocols IEEE 802.4 1-6 IEEE 802.5 1-6 PPP 1-11 SLIP 1-11 TCP/IP 3-2 network is unreachable 7-12 network mask 5-11 network model concepts 1-3 functions 1-3 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A layered model 1-3 layers 1-3 rules 1-3 structure 1-3 network name 7-14, 7-39 network number 5-11 network overload 3-5 network packets, capturing 3-15 network performance problems 3-4 network protocols 1-2 Network Time Protocol See NTP network topologies and OSPF 7-8 bus configurations 2-2 describing 2-2 ring configurations 2-4 star configurations 2-3 NFS 1-9 NIC 3-6, 6-2 no route to host 7-12 noncontiguous netmasks 5-12 noncontiguous subnet masks 5-12 non-intelligent hubs 2-3 nonvolatile random access memory (NVRAM), Ethernet addresses 3-6 norip directive 7-18 noripin directive 7-18 noripout directive 7-18 NS record 10-18, 10-19 nslookup utility 10-29 NTP basic concepts 12-2 client daemons 12-13 configuration file parts 12-6 configuring a server 12-5 configuring clients 12-12 configuring stratum of a NTP server 12-8 configuring the stratum 12-8 external reference servers 12-9 fudge entry 12-8 functions 12-3 managing daemons 12-10 multicast advertisement 12-8 ntpg utility 12-11 peers 12-11 query program 12-11 snoop utility 12-15 terms 12-3 troubleshooting 12-14 undisciplined local clock 12-7 xntpdc utility 12-10 ntp.conf file 12-8 ntpq utility 12-11 NVRAM 3-6 O one-backup file 10-26 one-rbackup file 10-26 output errors 3-5 P packet data unit 1-5 parameters instance 3-20 TRACK_INTERFACES_ONLY_WITH_ GROUPS 8-55 path-vector algorithm 7-8 PDU 1-5 peer-to-peer description 1-10 encapsulation 1-10 header information 1-10 physical network interface 5-16 piggybacking 9-11 pntadm utility 11-10 Point-to-Point Protocol (PPP) 1-11 POP3 1-14 port-based address 3-8 port-based approach, Ethernet addresses 3-6 Post Office Protocol, version (POP3) 1-14 PPP 1-11 prefix notation 8-11 presenting data, Application layer functions 1-9 process, in.rdisc 7-21 programmable read-only memory (PROM) 4-8 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-9 protocol stack features 1-3 protocol statistics 3-19 protocols BGP 7-8 connection-oriented 9-3 EGP 7-7 FTP 1-8, 1-13 functions 1-2 ICMP 5-2 IGP 7-6 IP 5-2 link-state 7-8 NFS 1-9 RDISC 7-21 reliable 9-6 SCP 1-9 SLIP 1-11 SMTP 1-8 SNMP 1-8 SSH 1-9 stack 1-2 stateful 9-5 stateless 9-5 TCP 9-2, 9-8 telnet 1-8 Transport layer 9-2, 9-8 UDP 9-2, 9-8 unreliable 9-7 R RARP /etc/ethers files 4-9 /etc/inet/hosts files 4-9 description 1-12 in.rarp daemon 4-9 operation 4-7 performing a boot 4-8 PROM 4-8 TCP/IP Internet layer protocol description 1-12 RDISC Protocol 7-5, 7-21, 8-16 reading configuration files 10-32 reducing network traffic 9-11 reference clock 12-3 reliable protocol 9-6 Index-10 remote procedure call (RPC) 3-15 removeif option 5-20 Request for Comment See RFC resolver library routines 10-26 retransmit message 9-6 REVARP request 4-7 Reverse Address Resolution Protocol See RARP reverse loopback 10-22 reverse-domain file 10-21 RFC documents 1-4 listings 1-4 ring configurations 2-4 RIP 7-5, 8-21 root name server 10-18 route command 7-14 route poisoning 7-25 route table description 7-9 display 7-9 fields 7-10 flush 7-20 monitoring changes 7-19 netmask 7-20 protocol 7-7 search order 7-12 updates 7-4, 7-26 router advertisement 8-17 configuration 8-22 discover 8-16 troubleshooting 8-20 Router Discovery (RDISC) Protocol 7-5, 8-16 routing add route 7-14 advertisement 7-5 advertisement interval 7-22 autonomous system 7-6 between tunnels 8-77 broadcast 7-25 configuring at boot time 7-32 configuring without rebooting 7-34 default 7-4, 7-16 direct 7-3 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A dynamic 7-4 fundamentals 7-2 hold-down state 7-24 hops 7-23 indirect 7-3 initialization 7-32 initializing non-router 7-36 route poisoning 7-25 route table 7-4 split horizons 7-24 static 7-4 triggered updates 7-24 troubleshooting 7-37 Routing Information Protocol (RIP) 7-5, 8-21 RPC 3-15 RUNNING flag 6-6 S scope bits 8-14 SCP 1-9 scripts /etc/rc2.d/S69inet 7-5, 7-33 /etc/rc2.d/S72inetsvc 3-9, 5-11 /etc/rc3.d/S16boot.server 4-9 /etc/rcS.d/S30network.sh 8-55 /etc/rcSd/S30network.sh 5-11 add_install_client 11-80 secure copy 1-9 secure shell 1-9 security DNS 10-23 restricting queries 10-24 segment type 2-10 self-contained messages 9-4 semantics in network protocols 1-2 sender side congestion window 9-12 sequencing 1-2 Serial Line Internet Protocol (SLIP) 1-11 servers DHCP configuration 11-6 stratum 12-3 shared hubs 2-14 Simple Mail Transfer Protocol (SMTP) 1-8, 1-14 Simple Network Management Protocol (SNMP) 1-8, 1-14 site-local address 8-5, 8-10 SLIP 1-11 SMTP 1-8, 1-14 SNMP 1-8, 1-14 snoop utility capture network packets 3-15 DHCP traffic 11-75 NTP 12-15 NTP messages 12-14 reading the file 3-17 summary mode 3-15 using 3-15 verbose mode 3-15 SOA record 10-19 speed matching 1-2 split horizons 7-24 SSH 1-9 standby interface 6-4 star configurations 2-3 startup shell script 3-21 stateful autoconfiguration 8-7 protocol 9-5 stateless autoconfiguration 8-7 protocol 9-5 static direct routes 7-16 static routes configuring 7-16 configuring manual 7-18 definition 7-4 strata 12-3 stratum-1 server 12-3 subnet address 5-13 subnet masks contiguous 5-11 noncontiguous 5-12 subnetting 5-10 supernetting 7-29, 7-30 switches 2-14 switching devices 2-14 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-11 T TCP congestion window 9-12 datagram header 9-10 description 1-13, 9-10 flow control 9-12 header information 9-11 high-bandwidth network 9-13 large window 9-13 network congestion 9-12 protocol 1-7, 9-2, 9-8 receiver-side window advertisements 9-12 reliability 1-8 satellite networks 9-13 segment acknowledgement 9-12 segments 1-7 TCP/IP ARP 4-2 common protocols 1-11 headers 3-11 layers 3-11 model 1-1 Network Interface layer 3-2 peer-to-peer communication 1-10 PPP 1-11 protocol stack 9-8 SLIP protocol 1-11 TCP/IP layer model Application layer 1-4 common hardware platform 1-4 Internet layer 1-4 Network Interface layer 1-4 primary functions 1-5 Transport layer 1-4 TCP/IP protocols 1-11 telnet protocol 1-8, 1-13 test address 6-5, 8-50 time keeping 12-2 time-to-live 10-18 timing in network protocols 1-2 TRACK_INTERFACES_ONLY_WITH_GROUPS parameter 8-55 transfer, buffered 9-11 Index-12 transmission full-duplex 3-4 half-duplex 3-4 Transmission Control Protocol See TCP Transmission Control Protocol/Internet Protocol See TCP/IP Transport layer connectionless communication 1-8 connection-oriented communication 1-8 description 1-4, 1-7 error detection 9-8 fundamentals 9-2 protocol 9-2, 9-8 transport server 9-2 transporting data, Application layer functions 1-9 triggered updates 7-24 troubleshooting DHCP 11-68 DHCP client host name 11-72 DHCP clients 11-72 DNS server 10-28 IPv6 interface 8-29 multipathing 6-22 network names 7-39 non-router configuration 8-20 NTP 12-14 router configuration 7-37, 8-26 routing 7-37, 7-39 tools 3-18 tunnels configuring host to host 8-70 definition 8-70 host-to-host 8-70 routing 8-77 troubleshooting 8-77 twisted-pair 2-10 U UDP datagram header 9-9 datagrams 1-7 description 1-13, 9-9 procedure call 3-15 Network Administration for the Solaris™ Operating Environment Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A protocol 9-2, 9-8 reliability 1-8, 9-9 unconfiguring logical interfaces 5-20 undisciplined local clock 12-7 unicast addresses description 3-7, 5-7, 8-4 types 8-10 unreliable protocol 9-7 unspecified address type 8-12 unstructured stream orientation 9-11 User Datagram Protocol See UDP utilities arp 4-4 dhcpconfig 11-7 dhcpmgr 11-7 dhtadm 11-13 if_mpadm 6-20 ifconfig 5-2, 5-17, 5-18 ndc 10-32 ndd 3-19, 3-20, 3-21 netstat 3-4, 3-5 nslookup 10-29 ntpg 12-11 ntpq 12-11 pntadm 11-10 snoop 3-15, 12-15 xntpdc 12-10 W web servers 10-21 window advertisement 9-12 X xntpd daemon 12-8 xntpdc utility 12-10 V variable length subnet mask (VLSM) 5-12 variables FAILURE_DETECTION_TIME 6-6 local-mac-address? 3-8 vendor client class 11-81 virtual circuit connection 9-11 virtual interfaces 5-16 Virtual Local Area Network (VLAN) 2-5, 2-7 VLAN 2-5, 2-7 VLSM 5-12 Index Copyright 2002 Sun Microsystems, Inc All Rights Reserved Enterprise Services, Revision A Index-13 ... /etc/init.d/xntpd stop sys23# To start the daemon, perform the command: sys23# /etc/init.d/xntpd start sys23# 12 -10 Network Administration for the Solaris? ?? Operating Environment Copyright 2002 Sun Microsystems,... utility might perform this initial setting by means of a step or a slew Refer to the ntpdate man page for further details 12-12 Network Administration for the Solaris? ?? Operating Environment Copyright... (Network Information Service) The Sun Operating System 4.0 (minimum) network information service A distributed network database containing key information about the systems and the users on the