Feature #5768
closed
Complete Change of IP-Range and Addresses
0%
Description
Hi there,
for several months I have been using pfsense and I consider it to be one of the greatest pieces of software written. It's concise, straight to the point, works flawlessly and is constantly updated and improved. Thanks to all working on pfsense.
I have one feature request (actually it might even exist already, but I haven't found it): I recently found out about an IP conflict I ran into when connecting to my home network via OpenVPN. My office's network runs on the same IP-subnet (192.168.1.X) like my network at home. So, while connecting via OpenVPN is possible, getting access to my server won't work out, as there is also a server in my office with the same IP (192..168.1.22).
I now want to change my subnet at home. Is there a possibility to - easily - reconfigure my home-network, say by simply replacing all data (IP-addresses, FW-Rules, OpenVPN, Certificates) which contains the current subnet ("192.168.1.X") with the new one (e.g. "192.168.33.X"). Something like the find-and-replace-feature in many texteditors. But, of course, there's more to it. If that feature is not included, can it be done ? Or is there an easy walkthrough somewhere ?
Thanks again for all your efforts.
M.
Updated by Anonymous over 8 years ago
Its a very dangerous thing to do, but:
Most of pfSense's configuration is stored in the file /cf/conf/config.xml and since it also has two text editors (that have search & replace capability) you could start by connecting to your firewall via SSH and using one of the editors (ee or vi) to make those changes.
Certificates are a different matter since they are encrypted. I know of no solution other that to generate new certs.
Naturally you would make a backup copy of config.xml first :)
You would probably get more help on the forum: https://forum.pfsense.org/index.php#c2
Updated by Chris Buechler over 8 years ago
- Status changed from New to Closed
a careful search and replace in the config generally suffices for this. It's not something that would be implemented as a feature. Best to discuss on forum.