topic Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion in Expedition Discussions

Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

Nathan_Klym — Wed, 17 Nov 2021 22:30:10 GMT

HI - we are trying to migrate from a Cisco ASA to PA5250 at a large datacentre. When running the config through expedition it hangs on the merge step - last output displayed is "Generating Schedules vsys/dg:vsys1"

Note: we have migrated successfully using expedition about 10 other sites so far so this is our first major hiccup.

See below errors from the logs - anyone able to help determine what our next steps are?

Warning: simplexml_load_string(): Entity: line 6: parser error : Opening and ending tag mismatch: entry line 1 and schedule-type in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: simplexml_load_string(): </schedule-type> in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: simplexml_load_string(): ^ in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: simplexml_load_string(): Entity: line 7: parser error : Extra content at the end of the document in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: simplexml_load_string(): </entry> in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: simplexml_load_string(): ^ in /var/www/html/libs/common/xml/panosxml.php on line 1691

Warning: get_class() expects parameter 1 to be object, boolean given in /var/www/html/libs/xmlapi.php on line 1838
object(SimpleXMLElement)#88 PHP Fatal error: Un
Fatal error: Uncaught Exception: Wrong type of input parameters, expected SimpleXMLElement key:value: in /var/www/html/libs/xmlapi.php:1857
Stack trace:
#0 /var/www/html/libs/common/xml/panosxml.php(1693): SimpleXMLElement_append(Object(SimpleXMLElement), false)
#1 /var/www/html/bin/configurations/output/output_function.php(293): xml_schedules(Object(SimpleXMLElement), Array, Array)
#2 /var/www/html/bin/configurations/output/output_function.php(25): generate_xml(Array, '3')
#3 {main}
thrown in /var/www/html/libs/xmlapi.php on line 1857

define ('NumCPUs',1);
define ('TotalCPUs',2);
define ('SparkRAM','1592m');

userDefinitions.php

define ('PARSER_max_execution_time','10000');
define ('PARSER_max_execution_memory','1G');
define ('DBSQL_LOG_BIN',0);

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

azuniga — Wed, 17 Nov 2021 23:36:13 GMT

Hello @Nathan_Klym

What version of expedition are you using? Also when it says you are using schedules, are you using schedules on your firewall policy rules?

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

Nathan_Klym — Thu, 18 Nov 2021 12:51:31 GMT

We are running Expedition 1.1.91 currently.

I am not familiar with either our ASA or current PA configuration using schedules. Is there somewhere I can look in the config to confirm this? Will just search for schedules to see manually as well.

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

azuniga — Thu, 18 Nov 2021 19:07:45 GMT

Hello @Nathan_Klym

Try updating to the latest version of expedition and attempt to merge it again, if it doesn't work then send an email over to fwmigrate@paloaltonetworks.com and we can perform a session. The latest version of expedition is on 1.2.2 so you are few revisions behind.

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

Nathan_Klym — Thu, 18 Nov 2021 19:58:42 GMT

OK - just upgraded to 1.2.2 and will try again. Will let you know, thanks!

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

Nathan_Klym — Fri, 19 Nov 2021 16:07:38 GMT

Update - we are now able to merge the config and export the new xml. I found the scheudle area and deleted the objects.

All items came across except for the remapped interfaces, re running expedition again to see if we made a mistake during that steps.

Re: Generating Schedules vsys/dg:vsys1 merge hanging for a specific firewall conversion

azuniga — Fri, 19 Nov 2021 16:31:16 GMT

Hello @Nathan_Klym

Thanks for the update!