topic Change VSX cluster/gateway IP in Firewall and Security Management

Change VSX cluster/gateway IP

an_technical — Thu, 30 Jan 2025 06:55:36 GMT

Hi All,

I am following the article - sk92425 to change the VSX gateway and VSX cluster mgmt IP.

I see that by running vsx_util change_mgmt_subnet, I can also change the VSX gateway management IP on the VSX gateway.

Do I need to follow step 2, which is to Perform the relevant changes on VSX gateway / VSX cluster members running on Gaia OS?

Re: Change VSX cluster/gateway IP

HeikoAnkenbrand — Thu, 30 Jan 2025 08:11:20 GMT

1) Backup the management database before using this commands

2) Change gateway or cluster member management IP

# vsx_util change_mgmt_ip

3) Change the gateway / cluster member management IP subnet

# vsx_util change_mgmt_subnet

>>> With some versions I had the problem that the subnet mask had to be changed, otherwise the broadcast address would not be set. So I set it to a face address and then to a real subnet mask again.

4) Create a VSX policy that contains the VSX object.

5) Restart the Security Management server.

6) Perform the relevant changes on VSX gateway as described in the SK.

    >>> Change the management interfaces on both gateways Web GAIA:
           set vsx off
          Web GAIA changes
       set vsx on
    >>> Or use the CLISH to change the management interface.

7) The user must get a new license. If the user is not using central licenses then the licenses must be updated.
    >>> Update the license.

8 ) Manually reinstall the VSX policy.

Re: Change VSX cluster/gateway IP

an_technical — Thu, 30 Jan 2025 08:18:48 GMT

Hi @HeikoAnkenbrand :

Thanks for your reply. I will perform steps on the gateway as well.

I have another question: Backup the management database before using these commands.

Will configuration backup be sufficient, or should I export the complete database using ./migrate_export?

Re: Change VSX cluster/gateway IP

an_technical — Thu, 30 Jan 2025 11:40:46 GMT

Anyone?

Re: Change VSX cluster/gateway IP

HeikoAnkenbrand — Thu, 30 Jan 2025 13:52:00 GMT

As a precaution, I would perform the following backups:
1) GAIA snapshot -> sk108902
2) "migrate server export" -> sk135172

If it is an MDS, additionally:
3) "mds_backup" -> R82 Command Line Interface (CLI) Reference Guide - mds_backup