Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
V-Series Appliance Configuration > V-Series appliance network interface configuration > Changing the C interface IP address
Changing the C interface IP address
Help | V-Series Appliance | v8.2.x
If possible, do not change the C interface IP address. The number of activities that must be performed and the service disruption can be significant.
Sometimes it is necessary to change the C interface IP address. What is affected depends on the configuration of your appliances and the details of your deployment.
In most cases, off-box components that depend on or directly service an appliance should be uninstalled prior to changing the C interface IP address and reinstalled after the IP address change is complete. These components include:
*
TRITON Manager
*
Filtering Service
*
Network Agent
*
Real Time Monitor
*
DC Agent
*
Logon Agent
*
eDirectory Agent
*
Radius Agent
*
Remote Filtering Service
*
Sync Service
*
Linking Service
This document includes a summary of the considerations for 5 deployment scenarios when the C interface changes. See the technical paper V-Series: Changing the C Interface IP Address: Step-By-Step for more details.
 
* 
Important 
Back up your appliance and all affected off-box components before making any changes.
Find the scenario below that best matches your deployment for an overview of the update process.
*
Scenario 1: One TRITON AP-WEB-only appliance with two Windows servers (TRITON Manager and Log Server)
*
Scenario 2: One or many TRITON AP-EMAIL appliances with two Windows servers (TRITON Manager and Log Server)
*
Scenario 3: One TRITON AP-WEB and TRITON AP-EMAIL appliance with two Windows servers (TRITON Manager and Log Servers)
*
Scenario 4: Multiple TRITON AP-WEB appliances in a cluster with two Windows servers (TRITON Manager and Log Server)
*
Scenario 5: Multiple TRITON AP-WEB appliances in a cluster with off-box Policy Broker, TRITON Manager, and Log Server
Scenario 1: One TRITON AP-WEB-only appliance with two Windows servers (TRITON Manager and Log Server)
1.
If your deployment includes Web DLP, in the Content Gateway manager manually unregister Content Gateway with TRITON AP-DATA.
2.
On the Windows server that hosts Log Server, stop the Log Server service.
3.
On the TRITON management server machine, uninstall the TRITON Manager services and any other components from the list in the introduction to this topic that are on the machine. Make a list of uninstalled components.
4.
On the appliance, change the C interface IP address.
5.
Reinstall the TRITON management server components.
6.
On the Log Server host, change the IP address of the Policy Server entry in the websense.ini file to the new C interface IP address and restart Log Server.
7.
If your deployment includes Web DLP, restart the Content Gateway module to automatically re-register with the TRITON AP-DATA components.
Scenario 2: One or many TRITON AP-EMAIL appliances with two Windows servers (TRITON Manager and Log Server)
1.
If your deployment includes Email DLP, unregister Email DLP.
2.
On the appliance, change the C interface IP address.
3.
In the Email module of the TRITON Manager, change the appliance IP address to the new value.
4.
If your deployment includes Email DLP, re-register Email DLP.
Scenario 3: One TRITON AP-WEB and TRITON AP-EMAIL appliance with two Windows servers (TRITON Manager and Log Servers)
1.
If your deployment includes Web DLP, in the Content Gateway manager manually unregister Content Gateway with TRITON AP-DATA.
2.
If your deployment includes Email DLP, unregister Email DLP.
3.
On the Windows server that hosts your Log Server instances, stop the Log Server and Email Log Server services.
4.
On the TRITON management server, uninstall the TRITON Manager services and any other components from the list in the introduction to this topic that are on the machine. Make a list of uninstalled components.
5.
On the appliance, change the C interface IP address.
6.
Reinstall the TRITON management server components.
7.
On the Log Server host, change the IP address of the Policy Server entry in websense.ini to the new C interface IP address and restart both Log Server instances.
8.
In the Email module of the TRITON Manager, change the appliance IP address to the new value.
9.
If your deployment includes Email DLP, re-register with TRITON AP-DATA components.
10.
If your deployment includes Web DLP, restart Content Gateway to automatically re-register with the TRITON AP-DATA components.
Scenario 4: Multiple TRITON AP-WEB appliances in a cluster with two Windows servers (TRITON Manager and Log Server)
This provides a summary of the steps for each of the following:
*
Changing the C interface of the full policy source appliance
*
Changing the C interface of user directory and filtering appliances
*
Changing the C interface of filtering only appliances
Changing the C interface of the full policy source appliance
1.
If your deployment includes Web DLP, in the Content Gateway manager manually unregister Content Gateway with TRITON AP-DATA.
2.
On the Windows server that hosts Log Server, stop the Log Server service.
3.
On the TRITON management server machine, uninstall the TRITON Manager services and any other components from the list in the introduction to this topic that are on the machine. Make a list of uninstalled components.
4.
Document the current policy source settings of all appliances in the cluster.
5.
Change the policy source setting on all user directory and filtering and filtering only appliances to Full policy source.
6.
On the original full policy source appliance, change the C interface IP address.
7.
Re-apply the original policy source settings to each user directory and filtering and filtering only appliance, pointing the appliance to the new full policy source C interface IP address.
8.
Reinstall the TRITON management server components.
9.
On the Log Server host, change the IP address of the Policy Server entry in the websense.ini file to the new C interface IP address and restart Log Server.
10.
If your deployment includes Web DLP, restart the Content Gateway module to automatically re-register with the TRITON AP-DATA components.
Changing the C interface of the user directory and filtering appliance
1.
Uninstall off-box components (like DC Agent) that are registered to the user directory and filtering appliance whose C interface IP address will change.
2.
Temporarily change the policy source mode of any filtering only appliances that depend on the user directory and filtering appliance whose C interface IP address will change to full policy source appliances.
3.
Change the C interface IP address of the user directory and filtering appliance.
4.
Re-apply the original policy source setting to the filtering only appliances, pointing them to the new user directory and filtering C interface IP address.
5.
Reinstall off-box components that are registered to the user directory and filtering appliance.
Changing the C interface of the filtering only appliance:
1.
Uninstall off-box components (like Network Agent) that are registered to the filtering only appliance whose C interface IP address will change.
2.
Change the C interface IP address.
3.
Reinstall off-box components that are registered to the filtering only appliance.
Scenario 5: Multiple TRITON AP-WEB appliances in a cluster with off-box Policy Broker, TRITON Manager, and Log Server
 
* 
Note 
No appliance is set to Full policy source.
1.
If your deployment includes Web DLP, in the Content Gateway manager manually unregister Content Gateway with TRITON AP-DATA.
2.
Uninstall off-box components that are registered to the appliances whose C interface IP address will change.
3.
Document the policy source settings of all appliances in the cluster and then change the policy source setting of each to Full policy source.
4.
Change the C interface IP address (or addresses, if more than one appliance must change).
5.
Return the policy source settings of the appliances to their original mode. For appliances that connect to the appliance whose C interface changed, provide the new C interface IP address.
6.
Reinstall off-box components that are registered to appliances in the cluster.
7.
If your deployment includes Web DLP, restart the Content Gateway module to automatically re-register with the TRITON AP-DATA components.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
V-Series Appliance Configuration > V-Series appliance network interface configuration > Changing the C interface IP address
Copyright 2016 Forcepoint LLC. All rights reserved.