I have a Solaris 11 host with multiple network interfaces, and configured IPFilter to do some NAT works; however every time a physical link down, the ipfilter service becomes disabled; even if the link was later restored, the service will remain in disabled state.
For example there is a link down message from
Nov 29 18:08:22 solaris11exp mac: [ID 486395 kern.info] NOTICE: rge0 link down
The ipfilter service log file
/var/svc/log/network-ipfilter:default.log later shows:
[ 11月 29 18:08:27 Stopping because service disabled. ]
[ 11月 29 18:08:27 Executing stop method ("/lib/svc/method/ipfilter stop"). ]
[ 11月 29 18:08:28 Method "stop" exited with status 0. ]
I have to run a
svcadm enable network/ipfilter manually every time after this.
So my question is How to prevent the ipfilter service from disable (stop) on links down? Or if that is not possible, How to enable (start) the service automatically when the link is up?