Configure ports

Assign roles to a sensor’s network ports to create the desired configuration. The command applies only to the sensor where you run it and does not affect other sensors.

Show all current port configurations

Product	Guardian
Syntax	n2os-netconf ports --show
Description	Shows the ports name and current configuration.
Parameters	None
Where	The text-console (access directly or through secure shell (SSH))
To apply	Enter the command and press enter.

Identify the management port

Product	Guardian
Syntax	n2os-netconf ports --get-mgmt
Description	Shows the name of the port that is currently defined as the current management port.
Parameters	None
Where	The text-console (access directly or through SSH)
To apply	Enter the command and press enter.

Identify the IP address of the management port

Product	Guardian
Syntax	n2os-netconf ports --get-mgmt-ip
Description	Shows the internet protocol (IP) addresses of the management port.
Parameters	None
Where	The text-console (access directly or through SSH)
To apply	Enter the command and press enter.

Set a port as the management port

Product	Guardian
Syntax	n2os-netconf ports --change-mgmt PORT
Description	Sets the selected port as the management port and the port previously configured as management port as a listening port.
Parameters	PORT, For example: port1
Where	The text-console (access directly or through SSH). User must have root privileges. All SSH connections use the current management port and will be lost after the change. Do not run this command unless a serial connection, or a connection into the sensor through the new management port is available.
To apply	Enter the command and press enter. The sensor will reboot upon completion of the command to correctly apply this setting.

Set a passive port as an active port

Product	Guardian
Syntax	n2os-netconf ports --set-active PORT --ip IP/CIDR
Description	Sets the selected passive port as an active port assigning it an IP address and a subnet mask.
Parameters	PORT, For example: port1
	IP/CIDR, For example: 192.167.1.15/24
Where	The text-console (access directly or through SSH). User must have root privileges.
To apply	Enter the command and press enter.

Set an active port as a passive port

Product	Guardian
Syntax	n2os-netconf ports --set-passive PORT
Description	Sets the selected active port as a passive port removing any IP addresses and subnet mask from it.
Parameters	PORT, For example: port1
Where	The text-console (access directly or through SSH). User must have root privileges.
To apply	Enter the command and press enter.