topic Re: What is Best Practice for change interface, Which have been setup for SIC in Firewall and Security Management

What is Best Practice for change interface, Which have been setup for SIC

Adity12 — Mon, 24 Oct 2022 14:15:51 GMT

Hi All,

I have some issues with my lab, which I want to change the external interface, and also as an interface for the first time, I set SIC from smartconsole and connected from management to the security gateway.

If I change this interface and replace with the other IP address, the status of the security gateway becomes lost but SIC seems established.

Then I reset SIC from an object that gateway and reset via cpconfig from that gateway. the result is successful but on smartconsole, that gateway still reads as "Lost" and I try to delete all related to the object ( policy, interface, object ) and re-add again with the same name. The result is successful but the license trial on that gateway is missing.

Does anyone have any idea about changing the IP address for an interface that has been used for setup SIC from management?

Thanks Regards

Dio Aditya P

Re: What is Best Practice for change interface, Which have been setup for SIC

PhoneBoy — Mon, 24 Oct 2022 17:07:33 GMT

SIC is not specific to an IP address.
That said, anytime you change the management IP, a policy push is required to all gateways.
The way to change the management IP is to change the Main IP in the management object.
If NAT is required to connect to the management, you must configure NAT in the management object.

Re: What is Best Practice for change interface, Which have been setup for SIC

Adity12 — Tue, 25 Oct 2022 01:40:01 GMT

Hi @PhoneBoy

Thanks for your feedback, as you said that SIC is not specific to an IP address.

Here is my schema for changing interface management on the gateway in my lab:

1. I have a gateway with the hostname Lab-GW-1 and have 2 interfaces ( one for the internet and one for internal )

2. On the internet interface will connect to the IP 10.254.1.x ( let's say, I first set up this gateway using 10.254.1.66 )

3. And then I want to change that IP address from 10.254.1.66 to 10.254.1.86

4. First, I will change the IP address on the interface internet to 10.254.1.86

5. Second, on the object I will change the IP address on General properties, Network Management, and then Platform Portal.

6. Third, publish and install to all gateways.

7. But after a few second that gateway become lost

When the status of this gateway is lost, I still can push policy.

Here is the status of the gateway after I changed the IP for the interface internet.

If my explanation still not clear, please let me know.

Thanks Regards

Dio Aditya Pradana

Re: What is Best Practice for change interface, Which have been setup for SIC

PhoneBoy — Tue, 25 Oct 2022 01:47:39 GMT

This may be a cosmetic issue in SmartConsole.
Do you receive logs from the gateway after changing the IP and pushing policy?

Re: What is Best Practice for change interface, Which have been setup for SIC

Adity12 — Tue, 25 Oct 2022 02:32:37 GMT

Yes, i still receive log from the gateway.

here the capture, connection from management server to the gateway.

Re: What is Best Practice for change interface, Which have been setup for SIC

Adity12 — Tue, 25 Oct 2022 03:51:52 GMT

Hi @PhoneBoy

Thanks for your help.

This issue has been resolved, and I just need to restart the management server and then the gateway is normal now.

Thanks Regards

Dio Aditya Pradana