Commit failed stating "zones and interface is already in use" when push the Panorama template to the local firewall

K.Radhakrishnan — Tue, 20 Aug 2024 04:57:02 GMT

We have removed the firewall from the Panorama. Also cleared the DG and template as well.

Then re-add the firewall by importing it to the Panorama.

With "Merge with Device Candidate Config" and "Include Device and Network Template" enabled, partial config pushed to the local firewall. However tried with the "Force Template Value", it fails with the below error.

Verified the local firewall, we could see the zones, interface and IPsec shows as override and no changes are accepting from the template.

So manual reverted the override locally however it ends up with the same validation error.

Some of the tunnel interfaces also shown in the commit failure logs but rename/wipe may impact the existing connection.

Is there a way to resolve this issue apart from renaming/removing the identical objects?

Validation Error

Zone --> Branch_to_Corp --> Network --> layer3 'loopback.101' is already in use

Zone --> Branch_to_Corp --> Network --> layer3 'loopback.102' is already in use

Zone --> Branch_to_Corp --> Network --> layer3 is invalid

Zone --> Branch_to_Corp --> Network is invalid

Zone is invalid

Vsys is invalid

Device is invalid

Configuration is invalid

Any help is highly appreciated. Thanks in advance!

topic Commit failed stating "zones and interface is already in use" when push the Panorama template to the local firewall in Panorama Discussions

Commit failed stating "zones and interface is already in use" when push the Panorama template to the local firewall