Unable to Commit

InsightOneCall — Tue, 21 Dec 2021 19:57:47 GMT

I've just changed the configuration of the management ip address, but can't commit the change. When I attempt to submit it I get the following error:

admin@PA-3050# commit

...
ID population failed
Error: id 10630 is outside allowed range [1-3583]
(Module: device)
Commit failed

admin@PA-3050# show deviceconfig system
system {
ip-address 192.168.0.50;
netmask 255.255.255.0;
update-server updates.paloaltonetworks.com;
update-schedule {
threats {
recurring {
weekly {
day-of-week wednesday;
at 01:02;
action download-only;
}
}
}
}
timezone US/Pacific;
service {
disable-telnet yes;
disable-http yes;
}
snmp-setting {
snmp-system;
}
hostname PA-3050;
default-gateway 192.168.0.1;
dns-setting {
servers {
primary 8.8.8.8;
secondary 8.8.4.4;

admin@PA-3050> show system info

hostname: PA-3050
ip-address: 172.22.120.199
netmask: 255.255.255.0
default-gateway: 172.22.120.1
ipv6-address: unknown
ipv6-link-local-address: fe80::21b:17ff:feeb:7b7a/64
ipv6-default-gateway:
mac-address: 00:1b:17:eb:7b:7a
time: Thu Jan 28 16:45:16 2010
uptime: 0 days, 0:45:01
family: 3000
model: PA-3050
serial: 001701004577
sw-version: 6.1.0
global-protect-client-package-version: 0.0.0
app-version: 8481-7026
app-release-date: unknown
av-version: 0
av-release-date: unknown
threat-version: 0
threat-release-date: unknown
wf-private-version: 0
wf-private-release-date: unknown
url-db: paloaltonetworks
wildfire-version: 0
wildfire-release-date: unknown
url-filtering-version: 0000.00.00.000
global-protect-datafile-version: 0
global-protect-datafile-release-date: unknown
logdb-version: 6.1.3
platform-family: 3000
vpn-disable-mode: off
multi-vsys: off
operational-mode: normal

Re: Unable to Commit

OtakarKlier — Tue, 21 Dec 2021 21:46:50 GMT

Hello,

What version of PANOS are you running? I found the following:

https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-release-notes/pan-os-9-0-addressed-issues/pan-os-9-0-15-addressed-issues

PAN-157730
Fixed an issue where, after a firewall reboot, a commit or auto-commit operation failed with the following error message: ID population failed. This issue occurred because the Phase1 ID assignment failure did not trigger an idmgr reset.

Also I would highly recommend using a secure DNS provider and not Google.

Regards,

topic Re: Unable to Commit in General Topics

Unable to Commit

Re: Unable to Commit