Porting static IP

debitcardmayhem

Set up a proxy at the hard coded IP address perhaps, and live with the overheads .

closed

send an email to them all with instructions on how to change the remote management ip, should take about 1 minute each to do remotely otherwise

Gimp0r

As others have said you have little chance of porting the existing IPs out of your current ISP, although you could always ask?

To avoid this in the future it might we worth looking at getting some provider independant IPs, Revk the director of AAISP was blogging about them a few weeks ago.

http://revk.www.me.uk/2012/07/top-tips-on-getting-pi-space.html

Are all the routers the same, If so can't you just write a script that logs in and adds the new IP to the firewall/remote admin? Then after its changed over and you know it works run the script again to remove the old IP?

Just thinking aloud, Sorry if its all rubbish

chunter

Gimp0r wrote: »

http://revk.www.me.uk/2012/07/top-tips-on-getting-pi-space.html
/

Hardly a word did I understand..
so i went to his blog entry on PI
http://revk.www.me.uk/2012/07/pi.html
which sorta fits with the solution that we're aiming for - seem to be a bank of ip addresses which are independent of your broadband provider.
but notice the little caveat at the end.
- some websites will then NOT recognise you as a UK location, which can lead to all sorts of other problems...

paddyrg

Could this be an opportunity in disguise to overhaul your whole system to IPv6?

Notmyrealname

robatwork wrote: »

OK here goes.

Our IP is in hundreds of our customers' routers (as the IP, not a dyndns) in either the "remote management" section or in a firewall rule to allow us access but block others.

Darksun's "bit of a headache" would be a monumental nightmare for us...I can't even easily scope the amount of work involved.

That is because you're looking at it from the wrong end. Get the customer to make the alteration and all you need to do is send out a batch email.

What services won't use DNS?

fwor

Notmyrealname wrote: »

That is because you're looking at it from the wrong end. Get the customer to make the alteration

You assume too much about the customer.

I've worked on similar projects (where the customers were retailers), and in some instances it is impossible to find a single person at the customer's location with any level of competence at all. If they f**k it up (believe me, if it's possible, they will) then you have an immediate priority callout on your hands to some remote location, anywhere in the country, probably when you least need it.

paddyrg

Can hosts files map IP's? Might make a simple end-user quickfix whilst you roll out a proper fix?

Gimp0r

The way I understand it, you have lots of customers with presumably their own equipment that needs maintaining or whatever, You have one static IP in your office and you have configured all of the customers routers to allow your one IP access through the firewall and to remote admin the router, Its these routers that you need to reconfigure with the new IP. It has to be an IP and not a domain name as I doubt most routers would accept a domain name in the firewall rules and even if it did could be a security risk.

Is that about right or am I missing something?

Do you have SSH access to the routers or only through the remote admin web page?

As they are all likely to be different (if they are provided by the customers ISP or whatever rather than yourselves) then you couldn't even hope to script it. You could maybe make it a little easier to change them by creating a page of links like http://username : password@IP.IP.IP.IP:8080 and then at least you can just click the link and maybe get logged in automatically (if that even works these days)

I can't see any option other than doing it yourself manually.

Good luck

Notmyrealname

fwor wrote: »

You assume too much about the customer.

I've worked on similar projects (where the customers were retailers), and in some instances it is impossible to find a single person at the customer's location with any level of competence at all. If they f**k it up (believe me, if it's possible, they will) then you have an immediate priority callout on your hands to some remote location, anywhere in the country, probably when you least need it.

But you'll only have a handful. And TBH this is a situation you've created for yourself due to either lack of knowledge, incompetence, bad planning or all three so you are going to just have to accept that you're going to end up doing a lot of graft to sort it.

I only hope you've the foresight to use this as an opportunity to put a workable solution in place and implement it across your customer base rather than just change the IP addresses in the firewalls and routers.