Skip to content
English
Customer portal
Go to neeve.ai
  • There are no suggestions because the search field is empty.

Neeve Node Change WAN Interface Configuration

Procedure to Change WAN Configuration from Static IP to Dynamic (DHCP)


1. Purpose

This document provides the standard procedure for accessing a Neeve Node through the Management Port using SSH, checking the current WAN interface configuration, and removing the existing WAN configuration when the Node is required to obtain its WAN settings dynamically through DHCP.

2. Scope

This procedure applies to Neeve Nodes requiring local access through the Management Port for WAN interface configuration.

This SOP covers:

  • Management Port connectivity
  • Laptop IP configuration
  • SSH access to the Node
  • Downloading and using the Default SSH Key
  • Checking the WAN interface configuration
  • Removing the existing WAN configuration
  • Saving and verifying the configuration

3. Prerequisites

Before beginning the procedure, ensure the following are available:

  • Neeve Node powered on
  • Laptop or computer with an Ethernet/LAN port
  • LAN cable
  • Appropriate SSH private key
  • SSH client/OpenSSH installed on the laptop
  • Administrator user access to the Secure Edge Dashboard, if the Default SSH Key is required

4. Management Port Configuration

Connect the laptop directly to the Node's LAN Port(Do not connect to WAN port) using a LAN cable.

Configure the laptop's Ethernet interface with an IP address within the following range:

Parameter Configuration
IP Address Range 192.168.192.2 – 192.168.192.254
Subnet Mask 255.255.255.0
Gateway IP 192.168.192.168

Example laptop configuration:

IP Address:    192.168.192.10 Subnet Mask:   255.255.255.0 Gateway:       192.168.192.168

Note: Do not assign 192.168.192.168 to the laptop, as this is the Node's default (Management) IP address.

5. SSH Access

The SSH key required depends on the current state of the Node.

5.1 ALIVE or Unreachable State

For Nodes in ALIVE or Unreachable state, use the Node's assigned private SSH key.

Run the following command:

ssh -i <Private_Key> iotium@192.168.192.168

Example:

ssh -i C:\Users\<username>\Downloads\node_private_key iotium@192.168.192.168

Replace:

  • <Private_Key> with the path to the Node's private SSH key.

5.2 NEW State or Node Not Appearing on Secure Edge

For Nodes in NEW state that are not appearing on the Secure Edge Dashboard, use the Default SSH Key(See Step 6).

Run:

ssh -i <Default_SSH_Key> iotium@192.168.192.168

Example:

ssh -i C:\Users\<username>\Downloads\default_ssh_key iotium@192.168.192.168

6. Download the Default SSH Key

To download the Default SSH Key:

  1. Log in to the Secure Edge Dashboard.
  2. Navigate to Node.
  3. Select All Nodes.
  4. Select the required Node.
  5. Open the Node Details page.
  6. Select Manage Node.
  7. Click Edit.
  8. Select Download Default SSH Key.
  9. Save the key securely on the laptop.

Security: The SSH private key must be treated as confidential information and stored securely.

7. Check the WAN Configuration

After successfully logging in to the Node, run:

show interface wan

Review the output and identify the current WAN configuration.

Before making any changes, record the existing WAN configuration for reference.

8. Remove the Existing WAN Configuration

If the WAN interface is configured with a static configuration and the requirement is to remove the existing WAN configuration, run:

unset WAN

Important: Confirm that the Node is expected to obtain its WAN configuration dynamically through DHCP before executing this command.

9. Save the Configuration

Save the configuration:

save

10. Exit the SSH Session

After saving the configuration, exit the SSH session:

exit

11. Verification

After completing the configuration:

  1. Connect the Node to the WAN network.
  2. Confirm that DHCP is available on the network.
  3. Allow sufficient time(5-10 mins) for the Node to obtain a dynamic IP address.
  4. Verify that the Node receives a valid IP address.
  5. Verify the Node's network connectivity.
  6. Verify the Node status from the Secure Edge Dashboard.
  7. Confirm that the Node returns to the expected ALIVE/Online state.

If local SSH access is available, run:

show interface wan

Confirm that the previous static WAN configuration has been removed and that the Node is receiving the expected network configuration.

12. Troubleshooting

12.1 Unable to Reach the Management IP

Verify the following:

  • LAN cable is properly connected.
  • Laptop Ethernet adapter is enabled.
  • Laptop IP address is within the 192.168.192.2 – 192.168.192.254 range.
  • Laptop and Node are on the same subnet.
  • Node Management IP is 192.168.192.168.
  • There is no IP address conflict.

Test connectivity using:

ping 192.168.192.168

12.2 SSH Permission Denied

Verify that the correct SSH key is being used.

For ALIVE/Unreachable Nodes:

ssh -i <Private_Key> iotium@<Node_IP_Address>

For NEW/not appearing on Secure Edge Nodes:

ssh -i <Default_SSH_Key> iotium@<Node_IP_Address>

Also verify that the SSH username is:

iotium

12.3 Node Does Not Obtain a Dynamic IP

Verify the following:

  • Node is connected to the correct WAN network.
  • DHCP is enabled on the customer's network.
  • The switch port is connected to the correct network/VLAN.
  • DHCP traffic is permitted.
  • Ethernet cable and switch port are functioning correctly.
  • No network or firewall policy is blocking DHCP.

12.4 Node Becomes Unreachable After WAN Configuration Change

If the Node becomes unreachable after running:

unset WAN

verify that:

  • DHCP is available on the customer's WAN network.
  • The Node is connected to the correct network.
  • The correct VLAN/network is being provided to the Node.
  • The Node is physically connected and powered on.

If required, reconnect to the Node locally through the Management Port and check the WAN configuration:

show interface wan

If the issue persists, escalate to the appropriate Neeve Support or Network team.

13. Command Reference

SSH Login

ssh -i <Private_Key> iotium@<Node_IP_Address>

Check WAN Configuration

show interface wan

Remove WAN Configuration

unset WAN

Save Configuration

save

Exit SSH

exit

14. Complete Procedure

For an ALIVE/Unreachable Node:

ssh -i <Private_Key> iotium@<Node_IP_Address>  show interface wan  unset WAN  save  exit

For a NEW/Not Appearing on Secure Edge Node:

ssh -i <Default_SSH_Key> iotium@<Node_IP_Address>  show interface wan  unset WAN  save  exit

15. Important Notes

  • Always verify the current WAN configuration before making changes.
  • Record the existing configuration before executing unset WAN.
  • Confirm DHCP availability before removing the static WAN configuration.
  • Changing the WAN configuration may temporarily interrupt Node connectivity.
  • Keep all SSH private keys secure.
  • Verify Node connectivity and status after completing the configuration.