Changing Basic Config Info on a sensor

[dblairii]

I am about to begin the migration of several sensors (read as: more than 40) to a new subnet (C&C - Out of Band Network), due to a need for a larger number of available IP's. For obvious reasons I don't want to have to reinstall all of my sensors...

I use CiscoWorks VMS 2.2/1.2.3 and my sensors are 4.1(4)

My questions are:

1) Can I just re-run "setup" in the CLI, change the IP, SNM, and Gateway and still have everything work (assuming that I delete and re-import them into CW)?

2) Since I 'discovered' the sensors when they were originally imported into CW, is there a means for me to backup their current config, modify that config from CW and have it pushed back onto the sensor with the new network settings?

Thanks in advance!

Don

[jsivulka]

I guess you need to perform sysconfig-sensor on my sensors to feed new IP address info and completely rebuilt Director to new IP addressing scheme.

[pcomeaux]

Hey Don -

1 - Yes, no doubt about it.

2 - Have not tested it this way, but from the looks of it, you can change the IP address from within IDS MC. Defintely let us know how your experience goes if you give this a try.

peter

[dblairii]

I thought I would update you all on what I did to change the basic config of the sensors.

I still do not trust CiscoWorks enough to accomplish a config change, so I did this through the CLI.

Basically, I just re-ran the setup, changing the IP, SNM, gateway, and access list. Afterwards, I ran a 'tls gen' to create a new certificate and rebooted. Then I deleted each sensor from SecMon and IDS MC (I only had to do 8 sensors this time), and re-added them. Everything appears to be golden. Thanks for the input.

Don