1

I was asked to change the IP address of the management interface on our firewalls but not issue "no ip address" because it will put the interface in shutdown mode which needs to issue no shut again and simply just apply the new ip address. I could not try this to see if it actually happens because it's production environment so here I am. Is that right if I issue no ip address on the management interface, it goes to shutdown mode?

Improve this question
2
  • What IP are you actually connecting to? If you are using the mgmt0/0 address, then it will drop the session if you clear or change that address.
    – cpt_fink
    Commented Feb 18, 2015 at 5:15
  • @cpt_fink I get connected to the FW through admin context mgmt interface so dropping session is not an issue here.
    – Fanttazio
    Commented Feb 18, 2015 at 15:35

1 Answer 1

Reset to default
3

Issuing the No Ip Address command does not put the interface in a shutdown state. However, I believe your coworker is telling you that your telnet session will be dropped if you issue this command which is correct. Because you would no longer have a management address, you would also no longer have a session using the address set.

If you have to issue the No Ip addresscommand, do so from a console connection to avoid losing your session.

Improve this answer
5
  • +1 for the: If you have to issue the No Ip addresscommand, do so from a console connection to avoid losing your session. And agree as well - 'no ipaddress' just removes any IP configuration.
    – Jonathan
    Commented Feb 17, 2015 at 23:13
  • Changing the IP address by issuing a different ip address x.x.x.x y.y.y.y command will still drop your session if you are connected to that address.
    – cpt_fink
    Commented Feb 18, 2015 at 5:13
  • Yes, correct. But that other IP address will be reachable for a new session. Whereas issuing the no ip address command will leave you unable to initiate a remote session the mgmt.
    – HAL
    Commented Feb 18, 2015 at 14:00
  • I have an outbound connection to the device, but we use heavy logging so I did not want to cause any disruption for that matter.
    – Fanttazio
    Commented Feb 18, 2015 at 15:24
  • If you're changing the IP address, there will be disruption.
    – HAL
    Commented Feb 18, 2015 at 15:47

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.