topic Loopback interface lost zone on export in Expedition Discussions

Loopback interface lost zone on export

mb_equate — Thu, 19 Oct 2023 22:57:44 GMT

I use Expedition often for optimising existing PAN deployments. I'm currently using it to re-map interfaces for some new hardware, moving from physical interfaces to a LACP trunk.

Problem is the exported config is missing the zone for a loopback interface. This interface is used for GlobalProtect, and the config fails to commit until the zone is corrected and GP interfaces rebound. Is this a bug?

FWIW the interface has multiple addresses assigned.

expedition-beta/unknown,now 1.2.76 amd64 [installed]

Re: Loopback interface lost zone on export

mb_equate — Thu, 19 Oct 2023 23:40:47 GMT

Turns out the zone includes the interface in the export, yet when imported to Panorama it's gone:

Re: Loopback interface lost zone on export

dpuigdomenec — Fri, 20 Oct 2023 10:58:57 GMT

Hi @mb_equate

Thanks for reaching out.

It looks like a bug in the tool. Please could you share your configuration with fwmigrate@paloaltonetworks.com uploading it into a TAC case.

Please send us the TAC case number to above email.

Thanks in advance,

David