Update the Management or Recovery Network Interface

By default, the installation chooses the Management Interface. To select a different management or recovery network interface:

1. On the top navigation bar, click Configuration, and then click the Network tab.

2. Select an interface from the Management Interface and Recovery Interface lists, as needed.

3. Click Apply Changes.
   Changing the Management and Recovery Network Interfaces could log you out. If it does, you need to reconnect via the correct interface.

Choosing a different Management or Recovery Interface changes which network port is used for communicating with your appliance. If you make a change to either interface, you will not have access unless you connect via the correct network. Changing either interface may require you to change network cabling and your corporate network management before you can access NetMon.

If your management interface is on the 192.168.x.x subnet, the recovery interface is set to the 172.16.x.x subnet to avoid IP address conflicts.

Manual Network Configuration

NetMon supports manual configuration of management, recovery, and capture interfaces through Manual Network Configuration mode. This mode is useful for users who want to designate a capture interface that is not specified within NetMon's autoconfiguration options.

With Manual Network Configuration enabled, you are prompted for the name of the interface from
which NetMon should process packets, and NetMon does not modify any network interface configuration files or network settings upon startup. After the NetMon services start, the system waits for the specified capture interface to exist in an "up" state. You are responsible for configuring your Management Interface, Recovery Interface, and Capture Interface.

Manual Network Configuration is an advanced setting that should be enabled only by users with deep proficiency in Linux. A manual configuration could cause serious issues in your NetMon that LogRhythm Support cannot resolve and could ultimately require a full reboot or fresh install of NetMon. Proceed with extreme caution.

Before enabling Manual Network Configuration, save the network config with "Use High Throughput" disabled. Alternatively, modify the value of "enableHighThroughput" to "false" in /usr/local/probe/conf/ nm.yaml and restart the NetMon services. For more information, see Use High Throughput.

To enable Manual Network Configuration:

1. On the top navigation bar, click Configuration, and then click the Network tab.

2. On the Interface Selection panel, click Enable Manual Configuration.

3. Enter a capture interface.

4. Click Apply Changes.

5. Restart NetMon for the changes to take effect. This can take a few minutes.