topic Re: How to change smo ip address in Hyperscale Firewall (Maestro)

How to change smo ip address

Jarvis_Lin — Tue, 09 Jan 2024 15:14:20 GMT

Hi all,

We need to change SMO IP from x.x.x.x to y.y.y.y

Is there any steps or guide to change the IP of SMO?

Re: How to change smo ip address

Dario_Perez — Tue, 09 Jan 2024 16:20:49 GMT

You need other interface with static IP to define as management IP, then you can change the IP of magg

sample

make sure you are in global.

set management interface bond1

set interface magg0 ipv4-address 192.168.1.5 mask-lenght 24

set management interface magg0

save config

then you can re-sic the object.

Re: How to change smo ip address

Martijn — Mon, 12 Feb 2024 08:20:54 GMT

Dario,

If you perform the mentioned procedure, the configuration of the Security Group on the MHO is also updated?
Or do we also need to do anything on the MHO like 'Set Security Group Configuration'?

Regards,
Martijn

Re: How to change smo ip address

emmap — Wed, 07 Feb 2024 01:28:06 GMT

The configuration on the MHO is not automatically updated, you can change it manually if you wish but once the Security Group is created the IP address in the MHO DB is essentially cosmetic.

Edit: Lari has corrected me on this, apparently there are times when the MHO DB isn't cosmetic, and hence should be updated when you update the SMO IP. Either by editing it in the WebUI of the MHO if it will let you, or editing the sgdb.json file and doing an orchd restart.

Re: How to change smo ip address

Martijn — Tue, 24 Sep 2024 06:30:53 GMT

Dario,

What is the best order op steps to perform when changing the IP-address of the SMO when I have a Maestro set as VSX Gateway?

1. Change the IP of the VSX Gateway object on the management with 'vsx_util'.
2. Change the IP on the SMO with the procedure you described here.
3. Change the IP of the Security Group in the orchestrators web GUI.

Is this the correct order, or would you do it some other way?

Why do I need to re-SIC? SIC is based on certificates and those certificates do not change?

Regards,
Martijn

Re: How to change smo ip address

Dario_Perez — Tue, 24 Sep 2024 08:27:25 GMT

VSX is not exactly the same procedure. for VSX is not re-sic is reconfigure.

you change the VSX management IP using the VSX util, change the IP on object >set vsx off /change IP /set vsx on on SG for MHO edit the sgdb.json nd restart the services.