topic Re: Issues Upgrading from 11.0.X to 11.1.X in VM-Series in the Private Cloud

Issues Upgrading from 11.0.X to 11.1.X

MeCJay12 — Mon, 04 Nov 2024 13:53:45 GMT

Hello! I'm trying to upgrade my VM series firewalls from 11.0.4-h5, since it's going EOL soon, to 11.1.4-h4. Once I upgrade, auto-commit fails with the very generic:

Validation Error: client routed phase 1 failure Commit failed Local configuration size: 12 KB Predefined configuration size: 16 MB Merged configuration size(local, panorama pushed, predefined): 20 MB

I tried factory resetting the box then pushing again but I get the same error. I tried upgrading to 11.2.3 but I got the same error. It seems like something changed in the config format but I can't tell what. Any ideas?

Re: Issues Upgrading from 11.0.X to 11.1.X

reaper — Wed, 06 Nov 2024 14:07:06 GMT

the error is occurring in routed, so there's something up with your VR

if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:

> debug routing global on debug > less mp-log routed.log or > tail follow yes mp-log routed.log

let us know what you see

Re: Issues Upgrading from 11.0.X to 11.1.X

MeCJay12 — Wed, 06 Nov 2024 14:47:21 GMT

That was exactly what I needed. Looks like I ran into a bug!

2024-11-06 06:15:09.715 -0800 Error: pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.

To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.