8.10. Procedure to manage the network parameters of `Tunnel` and `Management` interfaces

A - Introduction

This procedure describes:

Viewing the network settings

Modifying these parameters

For...	Use the command	carry out the procedures successively
obtain an overview of the information on all network interfaces	show network-config	1 - C - Preliminary operations 2 - D - Procedure to display the network configuration
display for each interface: MAC address, carrier presence, speed, and type of connection	show network-config	1 - C - Preliminary operations 2 - E - Procedure to display the status of the GCap network interfaces
display or change the domain name	show network-config domain or set network-config domain	1 - C - Preliminary operations 2 - F - Procedure to display/change the GCap domain name
display or change the system name	show network-config hostname or set network-config hostname	1 - C - Preliminary operations 2 - G - Procedure to display or change the GCap name
display or modify the interface used in SSH for administering the GCap and the GCap GCenter link	show network-config ssh or set network-config ssh	1 - C - Preliminary operations 2 - H - Procedure to display or modify the interface used to manage the GCap in SSH
display or modify the MTU value of the interfaces show	show interfaces or set advanced-configuration mtu	1 - C - Preliminary operations 2 - I - Procedure to display or change the MTU value
display or modify the TCP/IP settings of the Management / Tunnel interfaces	show network-config gcp0	1 - C - Preliminary operations 2 - J - Procedure to display or modify the TCP/IP settings of a `management` and/or `tunnel` interface

B - Prerequisites

User: setup
Commands used in this procedure:

C - Preliminary operations

Connect to the GCap (refer to Procedure to remote connection to GCap via an SSH tunnel)
Stop the Sigflow detection engine (refer to monitoring-engine)

D - Procedure to display the network configuration

The command prompt is displayed.

(gcap-cli)

Enter the command
```
show  network-config configuration
```
Validate

The system displays the information of all network interfaces

In this procedure, only the information on the management and tunnel network interfaces is detailed

For information on capture interfaces `monx`, refer to Procedure to manage the `monx` capture interface settings

The system displays the following information:
- System name (hostname)
- Domain name (domain_name)
- Details of the TCP/IP settings for each network interface (`management` and `tunnel`)
- Whether or not the interface is enabled
```
{
   "hostname": "GCap",
   "domain_name": "domain.local",
   "tunnel": {
       "ip_address": "192.168.1.1",
       "mask": "255.255.255.0",
       "default_gateway": "192.168.1.254",
   },
   "management": {
       "ip_address": "192.168.2.1",
       "mask": "255.255.255.0",
       "default_gateway": "192.168.1.254",
   },
```
Note

The configuration in the above example is dual interface.

E - Procedure to display the status of the GCap network interfaces

The command prompt is displayed.

(gcap-cli)

Enter the command
```
show interfaces
```
Validate.

The system displays the status of the GCap network interfaces.

For each interface, the following information is displayed:
- `Label`: the label name of the interface
- `Name`: the system name of the interface
- `Role`: the role assigned to the interface
- `Capture capability`: if the interface can capture traffic
- `MTU`: the MTU of the interface
- `Physical Address`: the MAC address of the interface
- `Speed`: the interface speed
- `Type`: the type of cable/sfp connected to the physical port
- `Vendor ID`: the Vendor ID of the network card
- `Device ID`: the ID of the network card
- `PCI bus`: PCI bus number used by the network card

F - Procedure to display/change the GCap domain name

The command prompt is displayed.

(gcap-cli)

To display the current name:
1. Enter the command
```
show network-config domain
```
2. Validate
  
  The system displays the domain name
```
Current domain name: gatewatcher.com
```

To change the current name:

Enter the command

set network-config domain-name gatewatcher.com

Validate

Setting hostname/domain name to:
   - Hostname: gcap-int-129-dag
   - Domain name: gatewatcher.com
Do you want to appl.. _proc9E:y this new configuration? (y/N)

Press the <y> button

Validate

Applying configuration...
Procedure completed with success

To check the value modification:
1. Enter the following command
```
show network-config domain
```
2. Validate
  
  The system displays the domain name
```
Current domain name: gatewatcher.com
```

G - Procedure to display or change the GCap name

The command prompt is displayed.

(gcap-cli)

To display the current name:
1. Enter the command
```
show network-config hostname
```
2. Validate
  
  The system displays the interface the host name of the GCap
```
Current hostname: GCap-name
```

To change the current name:

Enter the command
```
set network-config hostname gcap-name
```

Validate

Setting hostname/domain name to:
 - Hostname: gcap-name
 - Domain name: gatewatcher.com
Do you want to apply this new configuration? (y/N)

Press the <y> button

Validate

Applying configuration...
Procedure completed with success

To check the value modification:
1. Enter the following command
```
show network-config hostname
```
2. The system displays the host name of the GCap.
```
Current hostname: GCap-name
```

H - Procedure to display or modify the interface used to manage the GCap in SSH

The command prompt is displayed.

(gcap-cli)

To display the current configuration:
1. Enter the command
```
show interfaces
```
2. Validate
  
  The system displays the role of the different interface of GCap (`management` for SSH connection management, `tunnel` for IPSec tunnel, `management-tunnel` for both )
  - In the case of the single-interface configuration, the system displays:
  - In the case of the dual-interface configuration, the system displays:
To configure the `enpXXXX` interface for SSH and the `enpYYYY` interface for IPSec :
1. Enter the command
```
set interfaces assign-role enpXXXX management
```
2. Validate
3. Enter the command
```
set interfaces assign-role enpYYYY tunnel
```
4. Validate
5. Enter the command
  Note
  
  Replace in the following commands:
  IP by its value
  
  GATEWAY by its value
  
  MASK by its value
```
set network-config management ip-address IP gateway GATEWAY mask MASK
```
6. Validate
7. Enter the command
```
set network-config tunnel ip-address IP gateway GATEWAY mask MASK
```
8. Validate
To configure the `enpXXXX` interface for SSH and IPSec:

Note

No other interface is not used.
1. Enter the command
```
set interfaces assign-role enpXXXX management-tunnel
```
2. Validate
3. Enter the command
```
set network-config management ip-address IP gateway GATEWAY mask MASK
```
4. Validate

I - Procedure to display or change the MTU value

The command prompt is displayed.

(gcap-cli)

To display the current configuration of enabled interfaces:
1. Enter the command
```
show interfaces
```
2. Validate
  
  The system displays the result
  
  The values are displayed for all enabled network interfaces.
To change the current configuration of enabled interfaces: e.g. to change the MTU value of the `management` interface:
1. Enter the command
```
set advanced-configuration mtu enp19s0 2000
```
2. Validate
  
  The system displays the result
```
Updating Network MTU configuration to:
   - enp19s0: 2000
```

J - Procedure to display or modify the TCP/IP settings of a `management` and/or `tunnel` interface

The command prompt is displayed.

(gcap-cli)

To display the `management` and `tunnel` interface configuration :

Enter the command
```
show network-config management
```

Validate

{
  "hostname": "GCap",
  "domain_name": "domain.local",
  "tunnel": {
    "ip_address": "192.168.1.1",
    "mask": "255.255.255.0",
    "default_gateway": "192.168.1.254",
},
  "management": {
    "ip_address": "192.168.1.1",
    "mask": "255.255.255.0",
    "default_gateway": "192.168.1.254",
 },

To change the configuration of the `management` interface address :

Enter the command

set network-config management ip-address IP gateway GATEWAY mask MASK conf

Validate

The system displays the `management` interface configuration.

Setting interface management to configuration :
   - IP Address:
   - Mask:
   - Gateway:
Do you want to apply this new configuration? (y/N)

Press the <y> button
Validate