5.5.12. Switching to a dual-interface configuration

5.5.12.1. Introduction

In single-interface configuration, the SSH connection for managing the GCap and the VPN communication are handled by one interface with the role management-tunnel.
In dual-interface configuration:

The VPN communication is controlled by one interface with the role tunnel
The SSH connection for GCap management is handled by the interface with the role management

This procedure outlines the switchover from a dual-interface configuration to a single-interface configuration.

Important

The user will lose the session if the connection between the GCap and the user's PC is made remotely via SSH.

In order to avoid this disconnection, connect to the GCap:

Either by a direct connection (connect directly to the server)

Or by a HTTP remote connection (iDRAC function for a Dell server)

Or by a remote connection to the CLI in SSH via the iDRAC interface in serial port redirection mode

5.5.12.2. Prerequisites

User: setup
Commands used in this procedure:

5.5.12.3. Preliminary operations

As appropriate, refer to:
Stop the detection engine (see monitoring-engine).

5.5.12.4. Procedure for displaying the current configuration

To display the management and ``̀`tunnel``` interfaces configuration:
- Enter the following command.
```
(gcap-cli) show interfaces
```
- Validate.
  The system displaying the management and ``̀`tunnel``` interfaces configuration.
  - Dual-interface configuration The VPN communication is controlled by the enp11s0 interface.
    The SSH connection for GCap management is handled by the enp19s0 interface.
    In this case, the system displays:
  The role tunnel and role management indicates that the current configuration is dual-interface.
  In this case, there is nothing to do.
  - Single-interface configuration
    SSH and VPN connections are handled by the enp19s0 interface.
    In this case, the system displays:
  In this example, the current configuration is single-interface ( field: role, value : management-tunnel )
  In this case, continue with the following procedure.

5.5.12.5. Procedure for switching from single to dual interface configuration

Use the following command to unpair the GCap:

 (gcap-cli) unpair 

Enter the following command to configure the current management-tunnel interface with the role management:

 (gcap-cli) set interfaces assign-role enp19s0 management

Validate.
Enter the following command to configure the selected interface with the role tunnel :

 (gcap-cli) set interfaces assign-role enp11s0 tunnel

Validate.

Enter the following command the IP configuration of tunnel interface:

 (gcap-cli) set network-config tunnel ip-address Y.Y.Y.Y gateway Y.Y.Y.Y mask Y.Y.Y.Y confirm

Validate.
Rewire the GCap network cables if necessary.