topic Re: Cisco ASA - Unable to upload config file in Expedition Discussions

Cisco ASA - Unable to upload config file

Tien_Vo — Mon, 10 Aug 2020 14:00:41 GMT

Currently migrating ASA to PA-3220. It looks like process is stuck at phase 2 when trying to upload ASA config file. I have tried two different ASA config file but process seems to be hung and unable to complete.

Re: Cisco ASA - Unable to upload config file

lychiang — Mon, 10 Aug 2020 15:07:44 GMT

Hello @Tien_Vo

Could you please try to upgrade your Expedition to latest release v1.1.77 and try again. If it still not working, please open a TAC case and you can share the Cisco ASA config vis TAC case.

Thank you!

Re: Cisco ASA - Unable to upload config file

dgildelaig — Tue, 11 Aug 2020 08:35:30 GMT

The importing & conversion process leaves some logs in the /tmp/error file.

Could you check if this file shows messages that can help identifying the source of the issue?
If the information in there seems sensitive, please attach that file in the TAC case as well.

Re: Cisco ASA - Unable to upload config file

Tien_Vo — Tue, 25 Aug 2020 13:45:36 GMT

Currently, running on version 1.1.76.1 and when trying to update to 1.1.77, this is the issue that I ran into(13: Permission denied).

$ apt-get update
Reading package lists... Done
W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
E: Could not open lock file /var/lib/apt/lists/lock - open (13: Permission denied)
E: Unable to lock directory /var/lib/apt/lists/
W: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (13: Permission denied)
W: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (13: Permission denied)

Re: Cisco ASA - Unable to upload config file

azuniga — Tue, 25 Aug 2020 15:33:12 GMT

Please make sure that you are running those commands as a sudoer. You may not have sudo access on the current user profile and that's why you do not have permission.

Re: Cisco ASA - Unable to upload config file

Tien_Vo — Tue, 25 Aug 2020 19:28:39 GMT

Updated successfully to 1.1.80 but this did not resolve the ASA uploading configuration issue. Running into same problem as before, looks like the import is stuck at phase 2 in the process > File:AD2_config.txt Phase 2 Loading Address Objects.

Any ideas?

Re: Cisco ASA - Unable to upload config file

azuniga — Tue, 25 Aug 2020 20:17:34 GMT

@Tien_Vo

Did you check the /tmp/error file as suggested? Please share those details, and if you are still having issues please provide us with the TAC case number so we can attempt to replicate the issue.

Once you have uploaded your config to the TAC case please email us at fwmigrate@paloaltonetworks.com to give us that TAC case number so that we can see what the issue is.

Re: Cisco ASA - Unable to upload config file

Tien_Vo — Tue, 25 Aug 2020 20:34:00 GMT

Here are the details from /tmp/error.

Notice: Trying to get property of non-object in /var/www/html/libs/shared.php on line 2648

Notice: Trying to get property of non-object in /var/www/html/bin/configurations/parsers/Cisco/CISCO.php on line 9061

Fatal error: Uncaught Error: Call to a member function fetch_assoc() on boolean in /var/www/html/bin/configurations/pars ers/Cisco/CISCO.php:9199
Stack trace:
#0 /var/www/html/bin/configurations/parsers/Cisco/CISCO.php(670): get_interfaces(Array, 0, 'vsys1', 0)
#1 /var/www/html/bin/configurations/parsers/Cisco/CISCO.php(502): import_config('/home/userSpace...', 'ASAtoPA3220', 'AD 2_config.txt', 😎
#2 {main}
thrown in /var/www/html/bin/configurations/parsers/Cisco/CISCO.php on line 9199
n line 9199

Re: Cisco ASA - Unable to upload config file

azuniga — Tue, 25 Aug 2020 23:16:49 GMT

@Tien_Vo

Go ahead and open that TAC case and send us an email with the TAC case number, it looks like expedition is having an issue parsing through the config you are importing. We will need to see why that's happening.

Re: Cisco ASA - Unable to upload config file

Tien_Vo — Wed, 26 Aug 2020 21:40:55 GMT

Email sent. Thank you.

Re: Cisco ASA - Unable to upload config file

ETate — Wed, 22 Dec 2021 16:52:31 GMT

Hello,

I am having the same identical issue. Can I open a TAC case and share the number with you for assistance, as well?

Thanks,

Re: Cisco ASA - Unable to upload config file

ETate — Wed, 22 Dec 2021 17:16:32 GMT

Below are the errors I am getting in my $cat /temp/error output:

Thanks for your support