topic cannot commit - failure parsing config response module dhcpd in General Topics

cannot commit - failure parsing config response module dhcpd

LCMember2099 — Mon, 29 Nov 2021 21:56:00 GMT

I cannot commit changes on a PA-850 running 10.1.3

The error message shows below. What is the cause of this error?

---

Details

Failure parsing config response (Module: dhcpd)

client dhcpd phase 1 failure

Commit failed

---

Duplicate certificate subject found

Warning: tunnel tunnel.2 ipv6 is not enabled. IPv6 address will be ignored!

Re: cannot commit - failure parsing config response module dhcpd

AnalysisMan — Mon, 29 Nov 2021 23:09:50 GMT

Why don't you check the logs with 'less mp-log ms.log' via CLI?
The error is related to DHCP configurations.

Thanks,

Re: cannot commit - failure parsing config response module dhcpd

PavelK — Mon, 29 Nov 2021 23:11:54 GMT

Thank you for the post @LCMember2099

Could you try to restart DHCP or management process to see this error goes away?

debug software restart process dhcp

debug software restart process management-server

If this does not resolve the issue, could you have a look into logs: tail lines 100 mp-log pan_dhcpd.log

Was there any change prior to this issue?

Kind Regards

Pavel

Re: cannot commit - failure parsing config response module dhcpd

TomYoung — Tue, 30 Nov 2021 01:17:44 GMT

Hi @LCMember2099 ,

Ensure the subnet of the DHCP pool matches the interface IP address to which the pool is configured.

Thanks,

Tom

PS Delete the unused cert with the duplicate CN and enable IPv6 under tunnel.2 to get rid of your 2 warnings. You do not need to supply an IPv6 address. Just check the box.

Re: cannot commit - failure parsing config response module dhcpd

LCMember2099 — Thu, 02 Dec 2021 02:57:15 GMT

One of the interface originally had DHCP enabled. We added the DHCP config back and was able to commit. We then deleted the DHCP config and was still able to commit. Weird.