Setting up a VA in a network that does not have DHCP

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi! We are setting up a new VA. As always we downloaded it, and are in the first step, trying to change ip to static. Problem is that image runs in a phisicall network without DHCP (I always catch the ens160 interface, and copy its ip value to the static.network file, along with the ip present at resolv.conf for DNS, and the default gateway outputed by ip route).

Can I choose any vaule from 172.16.163.0/24 network? I noticed that dns and default gateway ip is 172.16.163.2, that is correct?

2

Your network team should be able to provide you the appropriate settings for your environment for both the dns server and the default gateway.

3

Hi, in this particular case, we are the network team. What we always do, is to download the VA image. As it comes with dhcp enabled, we take ip given, dns ip and default gateway. Then, we configure it as the static network ip address, dns and dg on static.network file.

For our network, we do not have dhcp enabled, so when we first start the fresh downloaded VA image, it have no ip, no dns and no dg configured.

Also, I am not used to flatcar. We have a ip range we can choose, but although VA is bridged, it always has a 172.xyz ip, I think because VA is self contained in the Flatcar image downloaded. I am trying to understand how it works, so I can assing an IP to this image.

4

Where are you deploying your VA? VMWare, HyperV, AWS, Azure?

5

Is a VMWare Player, inside another virutal host, hosted in some cloud X (local from our country).

6

Here is what I would try. Since your networking is bridged,

IP Address: Can be any IP in the 172.16.163.0/24 network that is not currently in use.

For the gateway, it should match the gateway of your host machine. You can look this up from a command prompt with IP config.

For dns, it should match what is on your host machine. From the command prompt, if you type in nslookup, you should see your default dns server.

7

Thanks for helping Alicia!

I tried locally too with the demo tenant va, and also with a “normal” va. In my case it gives me the network 172.16.34.0/24 (for both vas).

In dns and dg cases, dhcp also assings an ip of that range, I think flatcar has some dhcp service configured in the 172.16.X.0/24 range, somehow linked to the host network dhcp.

In my case, static.network:

[Match]
Name=ens160

[Network]
DNS=172.16.34.2
Address=172.16.34.128/14
Gateway=172.16.34.2

I will try your suggestion, with some ip from that range and will try.

8

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.