Removing the factory default address from eth0/bond0 - BlueCat Integrity

Removing the factory default address from eth0/bond0 - BlueCat Integrity - 9.4.0

Address Manager Administration Guide

Locale

English

Product name

BlueCat Integrity

Version

9.4.0

Remove the factory default address from eth0/bond0.

By default, Address Manager and DNS/DHCP Server ship with the factory default IPv4 address of 192.168.1.1 on the eth0 interface; this is also the default Primary Service IP.

For most customers, this default IP address will be removed by setting a new IPv4 address on eth0 during the initial set-up and configuration of the appliance or VM; the newly assigned IPv4 address on eth0 also becomes the new Primary Service IP. The default address may also be removed by adding a primary IPv6 address to the eth0 interface with set address, then using the remove address command to remove the default IPv4 address.

However, customers with DNS/DHCP Servers running VLAN interfaces might require the Primary Service IP on a VLAN interface, and as such will need to remove the IPv4 address on eth0 as a security measure to eliminate that potential route to the server. You can remove the default factory IPv4 address on eth0 or bond0 by first configuring the Primary Service IP on the required VLAN interface then removing the IPv4 address on eth0/bond0.

Warning: Changing the Primary Service IP address

The Primary Service IP address can't be removed. However, it can be changed and/or configured on a different Service interface (for example, if the Primary IP is currently set on eth0 and you want to set it on VLAN eth0.100). BlueCat advises extreme caution if attempting to change the Primary Service IP address and/or associated Service interface. Changing the Primary Service IP address and/or associated Service interface may result in a restart of all running services associated with that Service interface (such as services running on additional IP addresses, loopback addresses, and VLAN interfaces) and loss of connectivity.

To configure a VLAN interface with a Primary Service IP address, and remove the default address from eth0:

If performing a clean/new server installation, steps 1 and 2 aren't required; go to step 3.

From the DNS/DHCP Server Administration Console, remove the server from Address Manager control.
```
Adonis> configure system
Adonis:configure:system> set state no-proteus-control
```
From the DNS/DHCP Server Administration Console, run the reset factory-default command to remove all IP addresses and sub-interfaces.

Note: The reset factory-default command isn't supported on the bond0 interface. You must first run the remove bond0 command from Interface configuration mode, then run the modify eth0 and reset factory-default commands.

Warning: Run the reset factory-default command with extreme caution. Running this command will delete ALL IPv4 and IPv6 addresses and VLAN interfaces and bonding interfaces configured on the selected interface and restore factory defaults. This action is irreversible.
```
Adonis> configure interfaces
Adonis:configure:interfaces> modify eth0
Adonis:configure:interface:eth0> reset factory-default
All configurations for this interface will be set to factory default.
Please confirm to proceed(Y/y or N/n)? y
Successfully reset the interface to factory default
```
Add new VLAN interfaces.

Note: If you require NIC bonding/network redundancy on top of VLAN interfaces, you must configure bonding before creating VLANs. For details, refer to Configuring DNS/DHCP Server network redundancy from the Administration Console.
```
Adonis> configure interfaces
Adonis:configure:interfaces> add vlan-interface vlan-id <1> parent <eth0|bond0>
```

Assign IP address to the newly created VLAN interface.

Adonis> configure interfaces
Adonis:configure:interfaces> modify <vlan-interface>
Adonis:configure:interface:vlan-interface> add address <ipv4|ipv6address/CIDR>

Set the new Primary Service IP address using the IP address assigned to the VLAN interface.

Adonis:configure:interface:vlan-interface> set primary <ipv4|ipv6address>
Adonis:configure:interface:vlan-interface> save
Saved interface successfully
This operation will disconnect SSH connections.

Remove the IPv4 address 192.168.1.1 from eth0/bond0 interface.

Adonis> configure interfaces
Adonis:configure:interfaces> modify <eth0|bond0>
Adonis:configure:interface:eth0> remove address 192.168.1.1/24
Adonis:configure:interface:eth0> save
Saved interface successfully

Run the show interfaces command to verify the new Primary Service IP and that the default IPv4 address has been removed from eth0/bond0.

Adonis> show interfaces
eth0:
     Active = on
eth0.1:
     IPv4 Addresses
         192.0.2.100/24 (Primary)
     Active = on
eth1:
     Active = on
eth2:
     Active = off
eth3
     Active = off
Dedicated Management = Enabled
Management Interface = eth0.1
Service Interface = eth0.1

Return the DNS/DHCP Server to Address Manager control:

New servers—from the Address Manager user interface, add the server (Servers tab > New).
Previously managed servers—from the Address Manager user interface, Disable the server (Servers tab > server name > Disable) then replace the server (Servers tab > server name > Replace). From the Replace Server page, you must select the Reset services on remote DNS/DHCP Server check box due to changing the Services interface and Primary Service IP on the server.