https://live.paloaltonetworks.com/t5/next-generation-firewall/network-cutoff-when-pushing-a-configuration-change-to-logical/m-p/587707#M3225 <DIV data-reddit-rtjson="{&quot;entityMap&quot;:{},&quot;blocks&quot;:[{&quot;key&quot;:&quot;3rhj5&quot;,&quot;text&quot;:&quot; Hi Team,\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;3c4ns&quot;,&quot;text&quot;:&quot;We have faced a network Outage when pushing any Logical Router related configuration from Panorama to our managed firewalls. For example when associating new configured sub-interface to a logical-router and push the configuration to firewalls, there is a network outages for all existing production VLANs.\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;7idn2&quot;,&quot;text&quot;:&quot;For example, When adding a new Sub-interface (ae1.901) which IP address is 172.20.201.1/29 to the Logical Router “LR_STAGING” and pushing the configuration from Panorama to Firewalls, all the already defined Production VLANs (ae1.200 and ae1.201) are impacted and we have noticed network cutoff of access to its servers (for example, Cutoff of access to server 172.20.200.9). &quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;4gm5u&quot;,&quot;text&quot;:&quot;Panorama Version: 11.1.2-h3\nPA-5410 Firewall Version: 11.1.2-h3\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;e4rod&quot;,&quot;text&quot;:&quot;We need your support please.\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;8ccej&quot;,&quot;text&quot;:&quot;Thanks,\nAhmed &quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}}]}"> <DIV class="" data-block="true" data-editor="691701" data-offset-key="691701_initial-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="691701_initial-0-0"><SPAN data-offset-key="691701_initial-0-0"> Hi Team, </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="biron-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="biron-0-0"><SPAN data-offset-key="biron-0-0">We have faced a network Outage when pushing any Logical Router related configuration from Panorama to our managed firewalls. For example when associating new configured sub-interface to a logical-router and push the configuration to firewalls, there is a network outages for all existing production VLANs. </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="ame46-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="ame46-0-0"><SPAN data-offset-key="ame46-0-0">For example, When adding a new Sub-interface (ae1.901) which IP address is 172.20.201.1/29 to the Logical Router “LR_STAGING” and pushing the configuration from Panorama to Firewalls, all the already defined Production VLANs (ae1.200 and ae1.201) are impacted and we have noticed network cutoff of access to its servers (for example, Cutoff of access to server 172.20.200.9). </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="4o5cf-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="4o5cf-0-0"><SPAN data-offset-key="4o5cf-0-0">Panorama Version: 11.1.2-h3 PA-5410 Firewall Version: 11.1.2-h3 </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="6ol51-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="6ol51-0-0"><SPAN data-offset-key="6ol51-0-0">We need your support please. </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="dqlhq-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="dqlhq-0-0"><SPAN data-offset-key="dqlhq-0-0">Thanks, Ahmed </SPAN></DIV> </DIV> </DIV> Wed, 22 May 2024 21:59:07 GMT AhmedBoujelben 2024-05-22T21:59:07Z https://live.paloaltonetworks.com/t5/next-generation-firewall/network-cutoff-when-pushing-a-configuration-change-to-logical/m-p/587707#M3225 <DIV data-reddit-rtjson="{&quot;entityMap&quot;:{},&quot;blocks&quot;:[{&quot;key&quot;:&quot;3rhj5&quot;,&quot;text&quot;:&quot; Hi Team,\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;3c4ns&quot;,&quot;text&quot;:&quot;We have faced a network Outage when pushing any Logical Router related configuration from Panorama to our managed firewalls. For example when associating new configured sub-interface to a logical-router and push the configuration to firewalls, there is a network outages for all existing production VLANs.\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;7idn2&quot;,&quot;text&quot;:&quot;For example, When adding a new Sub-interface (ae1.901) which IP address is 172.20.201.1/29 to the Logical Router “LR_STAGING” and pushing the configuration from Panorama to Firewalls, all the already defined Production VLANs (ae1.200 and ae1.201) are impacted and we have noticed network cutoff of access to its servers (for example, Cutoff of access to server 172.20.200.9). &quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;4gm5u&quot;,&quot;text&quot;:&quot;Panorama Version: 11.1.2-h3\nPA-5410 Firewall Version: 11.1.2-h3\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;e4rod&quot;,&quot;text&quot;:&quot;We need your support please.\n&quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}},{&quot;key&quot;:&quot;8ccej&quot;,&quot;text&quot;:&quot;Thanks,\nAhmed &quot;,&quot;type&quot;:&quot;unstyled&quot;,&quot;depth&quot;:0,&quot;inlineStyleRanges&quot;:[],&quot;entityRanges&quot;:[],&quot;data&quot;:{}}]}"> <DIV class="" data-block="true" data-editor="691701" data-offset-key="691701_initial-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="691701_initial-0-0"><SPAN data-offset-key="691701_initial-0-0"> Hi Team, </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="biron-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="biron-0-0"><SPAN data-offset-key="biron-0-0">We have faced a network Outage when pushing any Logical Router related configuration from Panorama to our managed firewalls. For example when associating new configured sub-interface to a logical-router and push the configuration to firewalls, there is a network outages for all existing production VLANs. </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="ame46-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="ame46-0-0"><SPAN data-offset-key="ame46-0-0">For example, When adding a new Sub-interface (ae1.901) which IP address is 172.20.201.1/29 to the Logical Router “LR_STAGING” and pushing the configuration from Panorama to Firewalls, all the already defined Production VLANs (ae1.200 and ae1.201) are impacted and we have noticed network cutoff of access to its servers (for example, Cutoff of access to server 172.20.200.9). </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="4o5cf-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="4o5cf-0-0"><SPAN data-offset-key="4o5cf-0-0">Panorama Version: 11.1.2-h3 PA-5410 Firewall Version: 11.1.2-h3 </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="6ol51-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="6ol51-0-0"><SPAN data-offset-key="6ol51-0-0">We need your support please. </SPAN></DIV> </DIV> <DIV class="" data-block="true" data-editor="691701" data-offset-key="dqlhq-0-0"> <DIV class="public-DraftStyleDefault-block public-DraftStyleDefault-ltr" data-offset-key="dqlhq-0-0"><SPAN data-offset-key="dqlhq-0-0">Thanks, Ahmed </SPAN></DIV> </DIV> </DIV> Wed, 22 May 2024 21:59:07 GMT https://live.paloaltonetworks.com/t5/next-generation-firewall/network-cutoff-when-pushing-a-configuration-change-to-logical/m-p/587707#M3225 AhmedBoujelben 2024-05-22T21:59:07Z