Panorama Validation error

amrkaur — Fri, 07 Feb 2025 00:41:44 GMT

Hi all,

I have cloned a template where I am changing the interface from 1g to 10g. Also, I am planning to retain the IP address. In the new template, GP gateway related configs are not being copied to the new template. So I added them manually . while committing in panorama , I am getting the below error.

Validation Error:
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> interface 'ethernet1/17' is not a valid reference
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> interface is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip -> ipv4 'xxx.xxx.xx.xx/29' is not a valid reference
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip -> ipv4 is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices is invalid
devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config is invalid

I did raise a support case but no resolution from them so far.

Regards.

Re: Panorama Validation error

ASudheer — Fri, 07 Feb 2025 03:20:31 GMT

Hi @amrkaur ,

This appears to be an issue with your template. I kindly request that you attempt to copy the template and proceed to remove the gateway related configuration, VR routers, and interface. Then, manually add the new interface along with the VR router configuration and gateway configuration. It is important to validate and commit after each change. By following these steps, you will be able to narrow down the issue and resolve it.

Re: Panorama Validation error

amrkaur — Fri, 07 Feb 2025 03:30:26 GMT

Thanks a lot @ASudheer

topic Re: Panorama Validation error in Next-Generation Firewall Discussions

Panorama Validation error

Re: Panorama Validation error

Re: Panorama Validation error