8.13. Procedure to switch to the configuration dual-interface

A - Introduction

In single-interface configuration, the SSH connection for managing the GCap and the VPN communication are handled by one interface with the role `management-tunnel`.

In dual-interface configuration:

• The VPN communication is controlled by one interface with the role `tunnel`

• The SSH connection for GCap management is handled by the interface with the role `management`

This procedure outlines the switchover from a single-interface configuration to a dual-interface configuration.

Important

The user will lose the session if the connection between the GCap and the user's PC is made remotely via SSH.

In order to avoid this disconnection, connect to the GCap:

• Either by a direct connection (connect directly to the server)

• Or by a HTTP remote connection (iDRAC function for a Dell server)

• Or by a remote connection to the CLI in SSH via the iDRAC interface in serial port redirection mode

For...	Use the command	carry out the procedures successively
Display the current configuration	show interfaces	1 - C - Preliminary operations 2 - D - Procedure to display the current configuration
Switch from single to dual interface configuration	unpair set network-config set network-config	1 - C - Preliminary operations 2 - E - Procedure to switch from single to dual interface configuration

---

B - Prerequisites

• User: setup

• Commands used in this procedure:

  • show interfaces

  • set network-config

  • set network-config

  • unpair

---

C - Preliminary operations

• Depending on the situation, refer to:

  • Procedure to connect directly to the GCap via keyboard and screen

  • Procedure to connect the iDRAC in HTTP (DELL server)

  • Procedure to remote connection to the CLI using SSH via the iDRAC interface in serial port forwarding mode

• Stop the Sigflow detection engine (refer to monitoring-engine).

---

D - Procedure to display the current configuration

The command prompt is displayed.

(gcap-cli)

1. To display the `management` and `tunnel` interface configuration :

1. Enter the command

   show interfaces
   

2. Validate

   The system displays the `management` and `tunnel` interfaces configuration

• In dual-interface configuration

  The VPN communication is controlled by the `enp11s0` interface

  The SSH connection for GCap management is handled by the `enp19s0` interface

  In this case, the system displays:

  

  The role tunnel and role management indicates that the current configuration is dual-interface.

  In this case, there is nothing to do.
• The single interface configuration

  The SSH and VPN connections are handled by the `enp19s0` interface.

  In this case, the system displays:

  

  In our example, the current configuration is single-interface ( field: role, value : management-tunnel )

  In this case, continue with the following procedure.

---

E - Procedure to switch from single to dual interface configuration

The command prompt is displayed.

(gcap-cli)

1. Use the following command to unpair the GCap

   unpair
   

2. Enter the following command to configure the current `management-tunnel` interface with the role `management`

   set interfaces assign-role enp19s0 management
   

3. Validate

4. Enter the following command to configure the selected interface with the role `tunnel`

   set interfaces assign-role enp11s0 tunnel
   

5. Validate

6. Enter the following command to configure the tunnel interface IP

   Note

   Replace in the following command:

   • IP by its value

   • GATEWAY by its value

   • MASK by its value

   set network-config tunnel ip-address IP gateway GATEWAY mask MASK confirm
   

7. Validate

8. Rewire the GCap network cables if necessary

---