This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Restores not configuring interfaces properly UTM 9.356

I have two servers which I have been running UTM 9.3xx on using software version.  Both are the same hardware type and brands with 3 nics.

I recently loaded UTM 9.356 on one and tried a restore.  The restore went through as normal but only setup ONE nic, for the Untrusted setup and it was on a different NIC than was on the restore.  

The other two NICS were listed during the install and show up in the Webadmin hardware screen.  I went in and set up my other interfaces and all works now.

I did a backup of this unit and then performed the new install of the second server with the same UTM 9.356 and then did a restore from the UTM 9.356 server that I just created.

I had the exact same results as my first server and restore.

The first thing was that the installer renumbered the NICs.  EX:  eth0 is now eth2 etc

How can I fix these units so that I can get a proper backup and then be able to do a proper restore?



This thread was automatically locked due to age.
Parents
  • The NICs will be assigned in alphabetical order when you load from ISO.  Before you restore a backup from the other machine, edit the /etc/udev/rules.d/70-persistent-net.rules file to change the NIC order and reboot the device.  I learned this trick from BrucekConvergent many years ago.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Thanks Bob.

    I ran across this solution online to reorder the nics.

    BUT I left it the way Sophos had it and just recreated the interfaces.  Then I created a backup from this unit.  I setup the 2nd server with the same ISO and then did a restore from the new backup.  

    The outcome was the same.  It only brought in ONE interface for Untrust on NIC #2.  

    I can live with the reordered nics but I don't want to have to recreate the other interfaces everytime I have to do a reinstall.  It should recreate the interfaces as they were when they were backed up.

    Unless I am missing something here...

Reply
  • Thanks Bob.

    I ran across this solution online to reorder the nics.

    BUT I left it the way Sophos had it and just recreated the interfaces.  Then I created a backup from this unit.  I setup the 2nd server with the same ISO and then did a restore from the new backup.  

    The outcome was the same.  It only brought in ONE interface for Untrust on NIC #2.  

    I can live with the reordered nics but I don't want to have to recreate the other interfaces everytime I have to do a reinstall.  It should recreate the interfaces as they were when they were backed up.

    Unless I am missing something here...

Children
  • Unless the NICs are identical and installed in the identical slots, you can't get Linux to number them identically in both machines unless you edit the file to re-order the NICs on one.  This file is not a part of the configuration backup, nor should it be.  In fact, if you were to check both machines, you would see that only the drivers needed for the components present were installed on the hard drive.  If you install a new NIC of a brand not already installed, you must re-image to have the drivers loaded for it.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Bob,

    I understand about the NICs now. 

    I have 2 identical servers.  I re-imaged the 1st one and noticed the problem with the order of the nics.  I decided to leave it the way the OS liked the order and just recreated my interfaces and it works.  I took a backup of this working server and applied it to the 2nd server(re-imaged like the 1st one) and it still did not restore all of my interfaces that I had created in the 1st server.  It only brought in the Untrust NIC, and I had to recreate the interfaces again for the missing ones.


    This is what I am having an issue with now.