interface(4)

NAME
interface - network interface object for SunScreen configuration

DESCRIPTION
An interface object describes the SunScreen's location with respect to all other IP addresses. It is manipulated via the configuration editor or SunScreen administration GUI.

There are 5 sub-types of interfaces: ADMIN, DISABLED, ROUTING, HA, and STEALTH. A SunScreen can have either ROUTING or STEALTH interfaces. If it has STEALTH interfaces, it should also have one ADMIN interace for administrative traffic. If it has ROUTING interfaces, it should not have an ADMIN interface since administrative traffic can come in via a ROUTING interface. If the SunScreen is participating in an HA cluster, then it must also have a single HA interface.

A DISABLED interface is one that will not perform any filtering. If on an stealth SunScreen, it is a dead interface. If on an routing SunScreen, traffic between the Interface and the SunScreen will not be filtered, but traffic that then leaves the SunScreen via an "active" interface will be filtered.

All non-DISABLED interfaces describe what to do with packets that arrive on that interface that do not match a packet filtering rule. The fields are LOG, ICMP and SNMP. If not present, then the action is no taken.

The values for LOG are: NONE (same as not present), SUMMARY and DETAIL.

The values for ICMP are: NONE (same as not present), NET_UNREACHABLE, HOST_UNREACHABLE, PORT_UNREACHABLE, NET_FORBIDDEN and HOST_FORBIDDEN.

If SNMP is present, an SNMP packet will be sent. If not present, no SNMP packet will be sent.

A STEALTH interface may define a set of up to five routers, by IP Address. This is done with the ROUTER #.#.#.# keyword.

All interfaces may have an optional COMMENT field associated with them which is a 256-character or less user-provided comment.

All interfaces may be optionally associated with a specific SCREEN object. If an interface is so associated, its value will only be used on the SCREEN with which it is associated. If the SunScreen is part of a centrally managed group of SunScreens, this is necessary to distinguish which Interface definition belongs to which SunScreen.

An interface's unique name which is its given name plus the name of the Screen if it is so associated. "le0" and "le0" SCREEN "LA" are two examples of interfaces named "le0".

SEE ALSO
ssadm-edit(1M), address(4), screen(4)