Enabling ILB

This section describes the procedures you use to enable ILB.

How to Enable ILB

Before You Begin

Make sure that the system's role-based access control (RBAC) attribute files have the following entries. If the entries are not present, add them manually.

• File name: /etc/security/auth_attr

  • solaris.network.ilb.config:::Network ILB Configuration::help=NetworkILBconf.html

  • solaris.network.ilb.enable:::Network ILB Enable Configuration::help=NetworkILBenable.html

  • solaris.smf.manage.ilb:::Manage Integrated Load Balancer Service States::help=SmfILBStates.html

• File name: /etc/security/prof_attr

  • Network ILB:::Manage ILB configuration via ilbadm:auths=solaris.network.ilb.config,solaris.network.ilb.enable;help=RtNetILB.html

  • Network Management entry in the file must include solaris.smf.manage.ilb.

• File name: /etc/user_attr

  • daemon::::auths=solaris.smf.manage.ilb,solaris.smf.modify.application

You must set up user authorization for ILB configuration subcommands. You must have the solaris.network.ilb.config RBAC authorization to execute the ILB configuration subcommands listed in ILB Command and Subcommands.

• To assign the authorization to an existing user, see Chapter 9, Using Role-Based Access Control (Tasks), in Oracle Solaris 11.1 Administration: Security Services.

• You can also provide the authorization when creating a new user account on the system.

  The following example creates a user ilbadm with group ID 10, user ID 1210 and with the authorization to administer ILB in the system.

  # useradd -g 10 -u 1210 -A solaris.network.ilb.config ilbadmin

  The useradd command adds a new user to the /etc/passwd, /etc/shadow, and /etc/user_attr files. The -A option assigns the authorization to the user.

1. Assume a role that includes the ILB Management rights profile, or become superuser.

   You can assign the ILB Management rights profile to a role that you create. To create the role and assign the role to a user, see Initially Configuring RBAC (Task Map) in Oracle Solaris 11.1 Administration: Security Services.

2. Enable the appropriate forwarding service either IPv4 or IPv6 or both of them.

   This command produces no output when successful.

   # ipadm set-prop -p forwarding=on ipv4
   # ipadm set-prop -p forwarding=on ipv6

3. Enable the ILB service.

   # svcadm enable ilb 

4. Verify that the ILB service is enabled.

   # svcs ilb