Technical Tip: How to change the IP address for the FortiSOAR instance (Standalone)

[heng]

Description

This article describes how to change the IP address of the standalone FortiSOAR instance when the current IP address scheme needs to be updated due to a network re-design. 

Scope

FortiSOAR.

Solution

Steps:

1. Login to FortiSOAR via SSH with the csadmin admin credentials.
2. Verify the current IP addresses with the CLI: ip address. Identify the interface with the IP address that needs to be changed. In the example below, it is the interface ens160. 

sudo su

ip address
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:0c:29:99:b0:22 brd ff:ff:ff:ff:ff:ff
altname enp3s0
inet 10.47.48.99/20 brd 10.47.63.255 scope global noprefixroute ens160
valid_lft forever preferred_lft forever

3. Run the following in the CLI: 

nmtui

4. An interactive NetworkManager TUI setting prompt will appear. Select 'Edit a connection'.

Select the intended interface (which is ens160 in this example) and use the keyboard to navigate to the <Edit...> option, then press enter.

If the change is on IPv4, the changes can be made under the IPv4 Configuration. If the change is for IPv6, it can be made under IPv6 Configuration. Verify the changes then select OK to proceed. In the example here, the change is from 10.47.48.99 to 10.47.48.100.

The DNS server's IP address changes can be made by using the same interactive session. 

After saving the changes, select <Back>.

Select <OK> to commit the changes.

5. Run the following in the CLI:

systemctl restart network

This step will restart the network, applying the settings. The SSH session with the old IP address with be disconnected after running the command.

6. Log back in to the GUI and SSH with the new IP address to verify the changes. In this example, it will be 10.47.48.100. 

In the CLI:

sudo su

ip address
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
2: ens160: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether 00:0c:29:99:b0:22 brd ff:ff:ff:ff:ff:ff
altname enp3s0
inet 10.47.48.100/20 brd 10.47.63.255 scope global noprefixroute ens160
valid_lft forever preferred_lft forever

In the GUI:

Run https://10.47.48.100/login/ in the web browser.