topic Zone creation by API in Expedition Discussions

Zone creation by API

FilipElsen — Thu, 04 Apr 2019 13:16:54 GMT

Hi,

I'm using Expedition 1.1.12 and PanOs 8.1.7.

Since some time I fail in creating the ZONES via Expedition/API.

This while the creation of subinterfaces, Virtual router etc is working fine.

When sending the zone config by API, following message is received:

(if this zone config is removed out of the config, it's another one it's complaining about....)

This while the subinterfaces are existing correctly and the were created by API.

However on the related subinterfaces I notice the VSYS info is missing (should be vsys4 in this case):

(vsys is set to none)

When entering each subinterface, the vsys is there, but it doesn't show up in Network/Interfaces overview (see previous screenshot).

After clicking the drop down selector at Virtual System and selecting the very same item, the info appears in the overview (vsys is set to "GINET")

Since I was suspecting this to be the root cause my zone creation issues, I've re-sent the API commands from Expedition, exactly as tried initially and it worked perfectly.

Seems like a bug?

But for now, I have a workaround.

Best regards,

Filip

Re: Zone creation by API

sjanita — Mon, 08 Apr 2019 18:52:37 GMT

could be a sequence issue - for example:

1- send the zone configs

2-send the interface configs with the zone assignment

Re: Zone creation by API

FilipElsen — Tue, 09 Apr 2019 07:06:48 GMT

No -it isn't.

I've tried every possible way around it.

When sending the zones by API, they require the subinterfaces to be present.

So the sequence and workaround is:

1. sent the subint.

2. sent the vrouter

3. correct the subint to their vsys (just opening the subint config and re-select the vsys which was already present)

4. commit

5. sent the zones.