Use the VM-Series Firewall CLI to Swap the Management Interface
If you did not swap the management interface
(MGT) with the dataplane interface (ethernet 1/1) when deploying
the firewall, you can use the CLI to enable the firewall to receive
dataplane traffic on the primary interface after launching the firewall.
Before you proceed, verify that
the firewall has a minimum of two ENIs (eth0 and eth1). If you launch
the firewall with only one ENI, the interface swap command will cause
the firewall to boot into maintenance mode.
On the EC2 Dashboard, view the IP address of the eth1
interface and verify that the AWS Security Group rules allow connections
(HTTPS and SSH) to the new management interface (eth1).
Log in to the VM-Series firewall CLI and enter the following
command:
set system setting mgmt-interface-swap enable yes
Confirm that you want to swap the interface and use the
eth1 dataplane interface as the management interface.
Reboot the firewall for the swap to take effect. Use
the following command:
request restart system
Verify that the interfaces have been swapped. Use the
following command:
