修改核心参数后IPMP 在Cluster 显示失败

某日按指导书上配置增强Solaris 10的安全性, 运行如下一条命令

/usr/sbin/ndd -set /dev/ip ip_strict_dst_multihoming 1

结果发现scstat不能正常显示IPMP信息了

其他都能显示, 命令长时间停留在下面这行,

-- IPMP Groups --

 

messages显示

[ID 988885 daemon.error] libpnm error: can't connect to PNMd on host2

如果把ip_strict_dst_multihoming  关掉,

/usr/sbin/ndd -set /dev/ip ip_strict_dst_multihoming 0

 

scstat又正常了.

总结: 系统优化也要三思后行, 不能随意更改系统的参数.

以下是该参数的解释.

ip_strict_dst_multihoming and ip6_strict_dst_multihoming

Description	Determine whether a packet arriving on a non-forwarding interface can be accepted for an IP address that is not explicitly configured on that interface. If ip_forwarding is enabled, or xxx:ip_forwarding for the appropriate interfaces is enabled, then this parameter is ignored, because the packet is actually forwarded. Refer to RFC 1122 3.3.4.2.
Default	0 (loose multihoming)
Range	0 = Off (loose multihoming) 1 = On (strict multihoming)
Dynamic?	Yes
When to Change	If a machine has interfaces that cross strict networking domains (for example, a firewall or a VPN node), set this variable to 1.
Commitment Level	Unstable