8.12. Procedure to switch the single-interface configuration

A - Introduction

In single-interface configuration, the SSH connection for managing the GCap and the VPN communication are handled by one interface with the role `management-tunnel`.

In dual-interface configuration:

The VPN communication is controlled by one interface with the role `tunnel`
The SSH connection for GCap management is handled by the interface with the role `management`

This procedure outlines the switchover from a dual-interface configuration to a single-interface configuration.

Important

The user will lose the session if the connection between the GCap and the user's PC is made remotely via SSH.

In order to avoid this disconnection, connect to the GCap:

Either by a direct connection (connect directly to the server)

Or by a HTTP remote connection (iDRAC function for a Dell server)

Or by a remote connection to the CLI in SSH via the iDRAC interface in serial port redirection mode

For...	Use the command	carry out the procedures successively
Display the current configuration	show interfaces	1 - C - Preliminary operations 2 - D - Procedure to display the current configuration
Switch from dual to single interface configuration	unpair set network-config set network-config	1 - C - Preliminary operations 2 - E - Procedure to switch from dual-interface to single-interface configuration

B - Prerequisites

User: setup
Commands used in this procedure:

C - Preliminary operations

Depending on the situation, refer to:
Stop the Sigflow detection engine (refer to monitoring-engine).

D - Procedure to display the current configuration

The command prompt is displayed.

(gcap-cli)

To display the `management` and `tunnel` interface configuration :
1. Enter the command
```
show interfaces
```
2. Validate
  
  The system displays the `management` and `tunnel` interfaces configuration
  - The single interface configuration
    
    The SSH and VPN connections are handled by the `enp19s0` interface.
    
    In this case, the system displays:
    
    In our example, the current configuration is single-interface ( field: role, value : management-tunnel )
    
    In this case, there is nothing to do.
  - In dual-interface configuration
    
    The VPN communication is controlled by the `enp11s0` interface.
    
    The SSH connection for GCap management is handled by the `enp19s0` interface.
    
    In this case, the system displays:
    
    The role tunnel and role management indicates that the current configuration is dual-interface.
  - In this case, continue with this procedure.

E - Procedure to switch from dual-interface to single-interface configuration

Use the following command to unpair the GCap
```
unpair
```
To use the same IP configuration as the interface with `management` role:
1. Enter the following command to disable the configuration of current `tunnel` interface
```
set interfaces assign-role enp11s0 inactive
```
2. Validate
3. Then enter the following command to assign the role `management-tunnel` to the current `management` interface
```
set interfaces assign-role enp19s0 management-tunnel
```
4. Validate
To use another IP configuration than the interface with `management` role:
Note

Replace in the following commands:
IP by its value

GATEWAY by its value

MASK by its value
1. Enter the following command to reconfigure the management interface:
```
set network-config management ip-address IP gateway GATEWAY mask MASK confirm
```
2. Validate
3. Enter the following command to disable the configuration of current `tunnel` interface:
```
set interfaces assign-role enp11s0 inactive
```
4. Validate
5. Then enter the following command to assign the role `management-tunnel` to the current `management` interface
```
set interfaces assign-role enp19s0 management-tunnel
```
6. Validate
Note

To apply the IP configuration of current tunnel interface to current management interface, configure current tunnel interface with another network configuration before configuring the management interface.
Rewire the GCap network cables if necessary

Note

It is necessary to add the command attribute 'confirm' at the end of the command (set network-config management) if the pairing with the GCenter is active.