topic Reference not valid--Panorama in Panorama Discussions

Reference not valid--Panorama

Farzana — Tue, 27 Sep 2016 04:58:45 GMT

Hello,

Trying to deploy a new subinterface via a Panorama template to two PA-3060 devices but getting error below

Validation Error:
. import -> network -> interface 'ethernet1/6.52' is not a valid reference
. import -> network -> interface is invalid
. Commit failed

It doesn't matter what name or VLAN ID I give the interface, it does not allow to deploy the template to the devices. We do have template override on the devices for that interface, however I cannot create it manually on the devices because then I can't create rules via Panorama.

Already tried with and without the security zone, checked App and Threat DB match, Panorama and two units are 7.0.3. Checked known bug issues...

Panorama config:

Device config:

Any suggestion?

Thanks in advance.

Re: Reference not valid--Panorama

reaper — Tue, 27 Sep 2016 08:04:06 GMT

one thing that pops up is the absense of a vsys in that interface (the 'none' bit), you may need to set the vsys

else, try deleting the interface, push the config, re-create the interface, push again

Re: Reference not valid--Panorama

Farzana — Tue, 04 Oct 2016 21:59:44 GMT

Hello,

Just wanted to let provide an update/solution for the issue incase someone also faces similar problem.

During maintenance window, performed the following.

Back up firewall configuration
Remove Panorama Settings (IP address and Don’t import anything)
Click OK
Edit it again and enable both Policy and Device objects.
Click OK
From Panorama, commit Device Group (including the new sub-interface).

Thanks.

Re: Reference not valid--Panorama

Deepak25 — Tue, 31 Aug 2021 17:12:48 GMT

I have faced same issue. To resolve did following steps :

1. Reverted the changes

2. First added interface through panorama

3. Then added sub-interface successfully

Re: Reference not valid--Panorama

ImranFarooq — Thu, 16 Mar 2023 09:43:03 GMT

HI Farzana,

i am having the same issue.

my panorama version is 9.1.14-h1.

on your solution you mention remove panorama settings. i have removed it. do i need to commit it first before i push the config from panorama?

Thanks in advance