Verify that you are on the global zone:
# zoneadm -z global list
global
Note: If you see following message, you are not in the global zone:
"zoneadm: global: No such zone exists"
# dladm show-ether -Z | egrep "LINK|up"
LINK PTYPE STATE AUTO SPEED-DUPLEX PAUSE
net0 current up yes 1G-f bi
Determine the OS version that is being secured:
# uname -v
For Solaris 11, 11.1, 11.2, and 11.3:
# dladm show-linkprop net0 | egrep "LINK|en_" | sort|uniq
LINK PROPERTY PERM VALUE EFFECTIVE DEFAULT POSSIBLE
net0 en_1000fdx_cap rw 1 1 1 1,0
net0 en_1000hdx_cap r- 0 0 0 1,0
net0 en_100fdx_cap rw 1 1 1 1,0
net0 en_100hdx_cap rw 1 1 1 1,0
net0 en_10fdx_cap rw 1 1 1 1,0
net0 en_10gfdx_cap -- -- -- 0 1,0
net0 en_10hdx_cap rw 1 1 1 1,0
Do the above for all available/connected network adapters.
For Solaris 11.4.x.x.x or newer:
# dladm show-linkprop -p speed-duplex net0
LINK PROPERTY PERM VALUE EFFECTIVE DEFAULT POSSIBLE
net0 speed-duplex rw 1g-f,100m-f, 1g-f,100m-f, 1g-f, 1g-f,100m-f,
100m-h, 100m-h, 100m-f, 100m-h,10m-f,
10m-f,10m-h 10m-f,10m-h 100m-h, 10m-h
10m-f,
10m-h
Do the above for all available/connected network adapters.
For each link, determine if its current speed-duplex settings VALUE field is appropriate for managing any excess bandwidth capacity based on its POSSIBLE settings field; if not, this is a finding.