Change both Cloud-Delivered Firewall Management Center and Threat Defense IP addresses

Step 1

Disable the management connection.

1. Choose Devices > Device Management .

2. Next to the device, click Edit () .

3. Click Device , and view the Management area.

4. Disable management temporarily by clicking the slider so it is disabled () .

   

   You are prompted to proceed with disabling management; click Yes .

   

Step 2

Change the device IP address in the Cloud-Delivered Firewall Management Center to the new device IP address.

1. Edit the Remote Host Address IP address and optional Secondary Address (when using a redundant data interface) or hostname by clicking Edit () .

   

2. In the Management dialog box, modify the name or IP address in the Remote Host Address field and the optional Secondary Address field , and click Save .

   

Step 3

Change the Cloud-Delivered Firewall Management Center IP address.

1. Choose .

2. In the Interfaces area, click Edit next to the interface that you want to configure.

3. Change the IP address, and click Save .

Step 4

Change the manager IP address on the device.

1. At the Firewall Threat Defense CLI, view the Cloud-Delivered Firewall Management Center identifier.

   show managers

   Example:

   > show managers
   Type                      : Manager
   Host                      : 10.10.1.4
   Display name              : 10.10.1.4
   Identifier                : f7ffad78-bf16-11ec-a737-baa2f76ef602
   Registration              : Completed
   Management type           : Configuration

2. Edit the Cloud-Delivered Firewall Management Center IP address or hostname.

   configure manager edit identifier { hostname { ip_address | hostname } | displayname display_name }

   If the Cloud-Delivered Firewall Management Center was originally identified by DONTRESOLVE and a NAT ID, you can change the value to a hostname or IP address using this command. You cannot change an IP address or hostname to DONTRESOLVE .

   Example:

   
                                   > configure manager edit f7ffad78-bf16-11ec-a737-baa2f76ef602 
                                   hostname 
                                   10.10.5.1
                               

Step 5

Change the IP address of the manager access interface at the console port.

Step 6

Re-enable management by clicking the slider () .

For a high-availability pair or cluster, perform these steps on all units.

Step 7

(If you use a data interface for manager access) Refresh the data interface settings in the Cloud-Delivered Firewall Management Center .

1. Choose Devices > Device Management , and click Manager Access - Configuration Details , and then click Refresh .

2. Choose Devices > Device Management , and click the Interfaces tab and set the IP address to match the new address.

3. Return to the Manager Access - Configuration Details dialog box, and click Acknowledge to remove the deployment block.

Step 8

Ensure the management connection is reestablished.

In the Cloud-Delivered Firewall Management Center , check the management connection status. Navigate to the Devices > Device Management , and click Management section under the Device tab. Then, click Manager Access - Configuration Details to view the Connection Status page.

At the Firewall Threat Defense CLI, enter the sftunnel-status-brief command to view the management connection status.

This status indicates a successful connection for a data interface and displays the internal "tap_nlp" interface.

Step 9

(For a high-availability Cloud-Delivered Firewall Management Center pair) Repeat configuration changes on the secondary Cloud-Delivered Firewall Management Center .

1. Change the secondary Cloud-Delivered Firewall Management Center IP address.

2. Specify the new peer addresses on both units.

3. Make the secondary unit the active unit.

4. Disable the device management connection.

5. Change the device IP address in the Cloud-Delivered Firewall Management Center .

6. Re-enable the management connection.