topic Re: Expedition freezing when I try to merge configs in Expedition Discussions

Expedition freezing when I try to merge configs

LCMember1499 — Fri, 29 Sep 2023 16:01:16 GMT

Hi.
I am trying to use Expedition to merge an ASA config into Palo Alto. Imported the Palo Alto as 'Base-Config' and imported the ASA2 config from 'show run'.
Changed all the Zones in the ASA config to match what they become on Palo Alto, added a prefix 'From_ASA2_' to all the ASA Policy, removed some stuff on ASA which will not be required on Palo Alto.
Go to 'Merge' those configs, and Expedition simply sits there saying 'Initializing', nothing happens.
Monitor tab doesn't tell me anything useful, Expedition is 1.2.73.
Any ideas ?

Re: Expedition freezing when I try to merge configs

lychiang — Fri, 29 Sep 2023 16:09:02 GMT

@LCMember1499 Can you check if agent is started , try to reboot the VM and check the agent status to see if it's up.

Re: Expedition freezing when I try to merge configs

LCMember1499 — Fri, 29 Sep 2023 16:31:58 GMT

I rebooted the VM and went back to Expedition.
By 'agent' am I manually starting :
The opening page tells me that 'PANOrders Agent is stopped' and remediation is 'Start the Agent'.
I have successfully merged ASA configs to Palo in the past without these issues.

Re: Expedition freezing when I try to merge configs

lychiang — Fri, 29 Sep 2023 16:39:13 GMT

Hi @LCMember1499 Yes, you will need to click "remove all" to remove your 5 pending job , and click "restart" to restart the agent

Re: Expedition freezing when I try to merge configs

LCMember1499 — Mon, 02 Oct 2023 08:51:03 GMT

Not really getting anywhere with this.
As suggested I clicked to 'Remove all' to clear any pending jobs.
However the service resolutely refuses to start.
What displays is below.
'Start, Restart, Flush, Remove all' all have no effect.
No change after rebooting the host VM.
At boot up I have 3 failed checks :
"

Verify the Provided ML IP is Up

ML module is unreachable at 192.168.95.128
Remediation: Please, verify that the ML address is correct and reachable

"
that's the IP which I log onto Expedition at : https://192.168.95.128/#dashboard.
"

Verify the PanOrders agent is running to accept background jobs

PanOrders Agent is stopped
Remediation: Start the agent

This is the problem we are trying to solve.
And :
"

Verify that Python Software Dependencies have been installed

The following dependencies for ML are missing : BPA (3.33.0)
Remediation: Execute the following command in CLI:
sh /var/www/html/OS/BPA/updateBPA306.sh;

"
That last one, even under sudo root, gives me a permission error if I try to run the suggested command.

The ML and Python errors are not relevant here ?
Issue with the 1.2.73 upgrade ?

Re: Expedition freezing when I try to merge configs

LCMember1499 — Mon, 02 Oct 2023 09:32:55 GMT

Thanks for the assistance, I found https://live.paloaltonetworks.com/t5/expedition-discussions/panorders-agent-is-stopped-cant-restart/td-p/222870 which recommended removing, flushing and re-installing the rabbitmq server to solve a similar issue.
That one was dated July 2018 but, nothing ventured, nothing gained, I followed it anyway and .... it seems to have fixed the issue.
Service now started and merged config generated.
Thanks again.