Errors pushing template to firewall -can't find interface in 'vr-private-trust' for next hop - - New Build

MKurowksi — Wed, 12 Jul 2023 16:43:43 GMT

Im having a hard time figuring this out, the interafces exist in the template, also exist in the vmseries firewalls themselves and I confirgured them to L3 on the firewalls...

2023-07-12 11:38:39.903 -0500 Error: pan_conn_mgr_callback_expiry_async(cs_conn.c:8788): connmgr: Expired Request. entry:1024, msgno=0 devid=007957000386926-log-collection-lr-cms0-def
2023-07-12 11:38:44.621 -0500 logbuffer: no active connection to cms0
2023-07-12 11:38:45.036 -0500 PUSH: received push-data : dgname: Transit-2-Zone, dname: 007957000386955, jobid: 142, result: error, validate only: no, has_warnings: yes, msg: <msg cmd="push-data" dname="007957000386955" dgname="Transit-2-Zone" tplname="Transit" jobid="142" result="error">
<errors>
<line>can't find interface in 'vr-private-trust' for next hop 10.X.X.X(Module: routed)</line>
<line>client routed phase 1 failure</line>
<line>Commit failed</line>
</errors>
<warnings> </warnings>
<app-warn/>
<shadow-warn/>
</msg>2023-07-12 11:38:45.037 -0500 Template update device status - tplname: Transit, dname: 007957000386955, jobid: 142, result: error, validate only: no, has_warnings: yes, msg: <msg cmd="push-data" dname="007957000386955" dgname="Transit-2-Zone" tplname="Transit" jobid="142" result="error">
<errors>
<line>can't find interface in 'vr-private-trust' for next hop 10.X.X.X(Module: routed)</line>
<line>client routed phase 1 failure</line>
<line>Commit failed</line>
</errors>
<warnings> </warnings>
<app-warn/>
<shadow-warn/>

Re: Errors pushing template to firewall -can't find interface in 'vr-private-trust' for next hop - - New Build

PavelK — Thu, 13 Jul 2023 21:58:55 GMT

Hello @MKurowksi

thanks for posting.

This one looks like tough to troubleshoot.

What I would do is following to isolate the issue:

- Delete all the configuration in Template and add configuration one by one and push each added configuration to the Firewall until I either succussed or hit the issue at what point I would know what step exactly caused it.

- Push all Template configuration first before pushing Device Group configuration. Do not combine Device Group and Template Stack configuration in one push.

- Go to Template you are having issue with, then navigate to Interfaces, then navigate to the interface that belongs to VR: vr-private-trust and click on drop down list, then click on "Global Find" to check whether this interface is really reference in all mandatory configuration sections.

Kind Regards

Pavel

topic Errors pushing template to firewall -can't find interface in 'vr-private-trust' for next hop - - New Build in VM-Series in the Public Cloud

Errors pushing template to firewall -can't find interface in 'vr-private-trust' for next hop - - New Build

Re: Errors pushing template to firewall -can't find interface in 'vr-private-trust' for next hop - - New Build