Hi there,

We recently swapped hardware and did a hostname change and change of ip config on a RHEL4 box.

There is a bond0 interface with a x.x.x.2 ip and x.x.x.18 was added.

x.x.x.2 should have been removed but it wasn't. It's caused conflicts now with two ip's existing on the network, both resolving back to the same mac address.

The config files have been cleaned up now and there is no longer any reference to the x.x.x.2 address in the network config, however these changes will not take effect until we restart network service or reboot. We're back in production now, so cannot do this for some time.

ifconfig -a returns the bond0 interface and other valid interfaces, but not the x.x.x.2 interface. It's nowhere to be found. Can't even in /proc.

Is there any way to take this interface offline without dropping the network service?

Thanks
Justin

You can use "ifconfig <device> down" to shut down an interface.

Were the interfaces configured without an IP and the IP address entered in the bond0-ifcfg file?

Does the "important notice" from this RH 6 page apply for RH 4?
http://docs.redhat.com/docs/en-US/Re...aces-chan.html

I'm also wondering if not restarting the network service will apply changes to devices in the correct order.

I would also recommend that if you are exposing ssh to the internet, you use pubkey authentication instead of challenge/response.

Using putty you can generate a key pair. Then in the same putty KeyGen program, load in your private key. The corresponding public key in openssh format will be displayed at the top of the window. You can copy and paste it and then concatenate the key to the servers ~/.ssh/authorized_keys file. I'd recommend running "dos2unix" on the key file to replace MS's \r\n end of line sequence. It can cause problems reading config files.

The instructions on modifying /etc/ssh/sshd_config are usually given just above the "UsePAM" line.

Also consider adding "AllowUsers <yourusername>" to sshd_config as well. Attempts by users not in the list will be rejected. This is an easy way to reject all script kiddie attacks against system users.