We use cookies on our website to ensure we provide you with the best experience on our website. By using our website, you agree to the use of cookies for analytics and personalized content.This website uses cookies. More Information
It seems like your browser didn't download the required fonts. Please revise your security settings and try again.
Barracuda CloudGen Firewall

This Firmware Version Is End-Of-Support

Documentation for this product is no longer updated. Please see https://campus.barracuda.com/doc/71862301/ for further information on our EoS policy.

Best Practice - Changing the VIP Address of a Centrally Managed NG Firewall

  • Last updated on

To change the virtual IP (VIP) address of a centrally managed Barracuda NG Firewall, edit the VIP settings and back up the firewall configuration in the Barracuda NG Control Center. Then, directly connect to the Barracuda NG Firewall and restore it with the configuration backup that includes the new VIP settings.

In this article


Step 1. Add the New VIP Network Range

On the Barracuda NG Control Center, add the network range of the new VIP address. Keep the existing VIP network range.

  1. Open the Box VIP Network Ranges page (Config > Multi-Range > Global Settings >  Box VIP Network Ranges ).
  2. From the Configuration menu in the left pane, select VIP Networks.
  3. Click Lock.
  4. In the VIP Networks table, add an entry for the network range. Configure the following settings for the entry: 
    • Name – A name for the network range.  
    • Address Range Start – The IP address of the network range.
    • Address Range Netmask – The netmask.
  5. Click OK.
  6. Click Send Changes and Activate.

Step 2. Change the Virtual IP Address of the Barracuda NG Firewall

On the Barracuda NG Control Center, change the VIP address of the Barracuda NG Firewall.

  1. Open the Network page for the Barracuda NG Firewall (Config > Multi-Range > range > cluster > Boxes > box > Network).
  2. From the Configuration menu in the left pane, select Management Access.
  3. Click Lock.
  4. Write down the existing Virtual IP (VIP) address. You will need this address later.
  5. Change the Virtual IP (VIP) address. 
  6. Click Send Changes and Activate.

Step 3. Create a PAR File for the Barracuda NG Firewall

On the Barracuda NG Control Center, back up the configuration of the Barracuda NG Firewall to a PAR file. For instructions, see How to Back Up and Restore Your Systems.

Step 4. Modify the Management Access Firewall Rule for the Barracuda Control Center

To ensure that the Barracuda NG Control Center can still connect to the old VIP address of the Barracuda Firewall, edit its MANAGEMENT-ACCESS-TO-BOXES forwarding firewall rule to allow access to the old VIP address. 

In the Destination table of the MANAGEMENT-ACCESS-TO-BOXES rule, add the old VIP address of the firewall.

VIP Change.png 

After you successfully change VIP addresses, Barracuda Networks recommends that you remove the old VIP address.

Step 5. Restore the Barracuda NG Firewall

From the Barracuda NG Control Center, directly connect to the Barracuda NG Firewall with the old VIP address because the firewall is still using this VIP address. Then, assign the new VIP address to the Barracuda NG Firewall by restoring the firewall with the PAR file that you created in Step 3. Create a PAR File for the Barracuda NG Firewall.

For more instructions on how to restore a Barracuda NG Firewall with a PAR file, see How to Back Up and Restore Your Systems.

After restoring the configuration, go to the Control > Box page and execute a Soft network activation.

Last updated on