This short article will guide you on how to change the IP address in a Preseem appliance.
Preseem appliances ship with two management links, one is configured for DHCP and one is configured with a static IP address. For details of this configuration, please see the appropriate appliance page for port setup.
If you wish to set or change that IP address and management information, you'll need to SSH into the unit or use the included console cable that comes with the box. Once you're ready to log into the system, please use the credentials shown on the insert included when you received your appliance. When you first log in, you'll be prompted to change this default password. If you're unable to remember this password, please reach out to the support team via the in-app chat or support@preseem.com.
To initially set up management access for your appliance, you'll need the following:
- SSH or Console access
- Access credentials that were included on the insert when you first received the unit
- Access IP address with subnet (e.g., 10.101.32.14/28)
- Access Gateway IP address (e.g., 10.101.32.1)
- DNS IP address (e.g., 8.8.8.8)
As discussed above, we have two options to access the system. One is through SSH, and the other option is via the console. For instructions on setting up the console connection, please review this document. For the sake of simplicity, the steps below will discuss accessing the unit via SSH.
Port Setup
- On the Preseem 1000, enp1s0 is port 1, and enp2s0 is port 2.
- On the Preseem 5000, enp4s0 is port 1, and enp5s0 is port 2.
- On the Preseem 10000, enp8s0 is the main management port. Ports 1 and 2 are enp2s0f0 and enp2s0f1, respectively.
- On the Preseem 20000, enp1s0 is the main management port (port 6). Port 2 is enp105s0f0.
SSH Access
- Set your PC/laptop IP address to an IP that can reach the default management IP of the unit, (e.g., 192.168.2.10)
- Attempt to ping the IP of the management port via 192.168.2.1., If you can ping the IP, launch your SSH client to connect to the device.
- SSH via ssh preseem@192.168.2.1
- Use the credentials included on the card you received with the appliance to log into the device.
- You’ll be prompted to change the default credentials. Be sure to store them for your records.
Setting your management IP details
Now that you're logged into the unit, you can start setting the remote access details so Preseem can access the device remotely.
1. Run nmcli conn show to determine the name of the interface to which you're currently connected. This interface will appear highlighted in green. Example: enp4s0 or enp5s0.
bash# nmcli conn show
NAME UUID TYPE DEVICE
enp5s0 3256ca6b-2686-4d52-8e06-608851cf0c9d ethernet enp5s0
2. To edit the connection, you'll need the interface name discussed in the step shown above.. Below we'll use enp5s0 as an example; your interface name may differ depending on which port you're using. To edit or make changes to system level configurations, you will need escalated user permissions. You can do this by adding sudo before the command shown below.
sudo nmcli conn edit enp5s0
3. Once you're editing the interface, you can run print ipv4 to see all the IPv4-related fields. You'll notice the only thing currently set is the default IP address for access.
nmcli> print ipv4
['ipv4' setting values]
ipv4.method: manual
ipv4.dns: --
ipv4.dns-search: --
ipv4.dns-options: --
ipv4.dns-priority: --
ipv4.addresses: 192.168.2.1/24
ipv4.gateway: --
4. Now that we've confirmed we're connected to the correct interface, we can set the IP address, e.g., 10.101.32.14/28:
nmcli> set ipv4.addresses 10.101.32.14/28
This will prompt you whether you want to change the mode to manual. Just type Enter, or type yes and then Enter.
5. Set the gateway, e.g., 10.101.32.1:
nmcli> set ipv4.gateway 10.101.32.1
6. Set your DNS, e.g., 8.8.8.8:
nmcli> set ipv4.dns 8.8.8.8
7. Set the interface device and connection to auto-connect. This confirms the interface is automatically used as the management connection, even upon reboot.
nmcli> set connection.autoconnect yes
8. Save the configuration to make sure it is kept on reboot:
nmcli> save
9. Activate the configuration to make sure that it works:
nmcli> activate
10. If all changes were saved, and the profile was activated successfully, you can now quit to exit nmcli.
nmcli> quit
11. If the newly assigned IP is not reachable via the static IP previously assigned to your computer/laptop, you may notice your connection/terminal is no longer responsive. This is expected.
Confirm your changes
We want to ensure our changes were applied as expected. To do this, we'll start by confirming that you can ping the device via the newly assigned IP address. If you've recently set a public IP or a private IP address, ensure you change your laptop's IP/network settings accordingly. Once done, attempt to ping the newly assigned management IP. If it responds, the IP assignment was applied successfully.
Confirm remote accessibility
If the device is configured with a private IP, with NAT, please ensure you configure the necessary NAT rules to ensure the device is reachable externally. Once done, test remote access to ensure the device is reachable. If the device is configured with a public IP address, please attempt to log into the device via SSH to ensure the device is routable.
Securing the appliance
When configuring remote access, please ensure the box is only accessible via your management network and the jump boxes used by Preseem for administration and support purposes. Please ensure the Firewall/ACL rules block external access to the preseem appliance to only your management network and the following IP addresses: 35.199.29.237 and 35.197.73.77.
Contact support
If you experience any issues during the setup or steps shown above, or for assistance with remote access and securing the appliance. Please reach out to Preseem support via the in-app chat or email at support@preseem.com.