Configuration > X10G security blade network interface configuration > Changing the C interface IP address

Changing the C interface IP address

Sometimes it is necessary to change the C interface IP address. What is affected and what must be done depends on the configuration of your security blades and the details of your deployment. The number of activities that must be performed and the service disruption can be significant. If possible, retain the current C interface IP address.

In most cases, off-chassis components that depend on or directly service a security blade should be uninstalled prior to changing the C interface IP address and reinstalled after the IP address change is completed. These components include:

Off-chassis TRITON Unified Security Center

Filtering Service

Network Agent

Real Time Monitor

DC Agent

Logon Agent

Directory Agent

Radius Agent

Remote Filtering Service

Sync Service

Linking Service

 

Important  It is strongly recommended that you back up your security blade(s) and affected off-chassis components before making any changes.

Follow the steps in the scenario below that matches your deployment:

Scenario 1: Multiple security blades in a cluster, Web Security Gateway with off-chassis TRITON Unified Security Center and off-chassis Log Server

Summary of steps:

Covered under this scenario:

1.	Changing the C interface of the Full policy source security blade

2.	Changing the C interface of User directory and Filtering security blades

3.	Changing the C interface of Filtering only security blades

Summary steps for changing the C interface of the Full policy source security blade:

1.	If Web DLP is configured, unregister Content Gateway with the Data Security Management Server.

2.	On the Log Server host, stop the Log Server service.

3.	On the TRITON Unified Security Center host, uninstall TRITON Unified Security Center and associated components (see the component list, above). Make a list of uninstalled components.

4.	Document the Policy Source settings of all security blades in the cluster and then on the User directory and filtering and Filtering only blades, change the policy source setting to Full policy source.

5.	On the original Full policy source security blade, change the C interface IP address.

6.	On each of the secondary security blades, change the policy source setting from Full policy source to the original setting, pointing the blade to the new Full policy source C interface IP address.

7.	Reinstall TRITON Unified Security Center and associated components.

8.	On the Log Server host, change the IP address of the Policy Server entry in websense.ini to the new C interface IP address and restart Log Server.

9.	If Web DLP is used, reregister with Data Security Management Server.

Summary steps for changing the C interface of the User directory and Filtering security blade:

1.	Uninstall off-chassis components that are registered to the User directory and Filtering security blade whose C interface IP address will change.

2.	Temporarily make Filtering only security blades that depend on the User directory and Filtering security blade whose C interface IP address will change, Full policy source security blades.

3.	Change the C interface IP address of the User directory and Filtering security blade.

4.	Return the policy source setting of the Filtering only security blades to Filtering only, pointing them to the new User directory and Filtering C interface IP address.

5.	Reinstall off-chassis components that are registered to the User directory and Filtering security blade.

Summary steps for changing the C interface of the Filtering only security blade:

1.	Uninstall off-chassis components that are registered to the Filtering only blade whose C interface IP address will change.

2.	Change the C interface IP address.

3.	Reinstall off-chassis components that are registered to the Filtering only security blade.

For detailed step-by-step instructions, go to the Websense Technical Library and search for the article titled Changing the C interface IP address: step-by-step.

Scenario 2: Multiple security blades in a cluster, Web Security Gateway with off-chassis Policy Broker and off-chassis TRITON Unified Security Center

Note  No security blade is set to Full policy source.

If you have multiple security blades in a cluster, it is considered best practice to follow Scenario 2 when changing the C interface IP address.

Summary of steps:

1.	If Web DLP is configured, unregister Content Gateway with the Data Security Management Server.

2.	Uninstall off-chassis components that are registered to the security blade(s) whose C interface IP address will change.

3.	Document the Policy Source settings of all security blades in the cluster and then change the policy source setting of each to Full policy source.

4.	Change the C interface IP address (or addresses, if more than one blade must change).

5.

Return the policy source settings of the security blades to their original mode, pointing them to the new C interface IP address of a changed security blade if appropriate (if the blade is a Filtering only blade and the C interface change was to the User directory and Filtering security blade it pointed to).

6.	Reinstall off-chassis components that are registered to security blades in the cluster.

7.	If Web DLP is used, reregister with Data Security Management Server.

For detailed step-by-step instructions, go to the Websense Technical Library and search for the article titled Changing the C interface IP address: step-by-step.

Configuration > X10G security blade network interface configuration > Changing the C interface IP address