Can't push after adding a new subinterface to newly created vsys

Alterhut — Tue, 18 Jun 2024 15:03:26 GMT

Hi folks,

I newly created a new vsys for my ha-pair in my panorama. I have also created a new device-group but only use a single template for both vsys.

I've tried to create a new subinterface in my new vsys. The interface is already connected to my first vsys. The commit on panorama works fine. The push to the device ends in a "commit failed". Here is a snippet from the devsrv.log:

<< (vsys3)>>
Error: unknown interface ae3.826
<</ (vsys3)>>

If I try to manully to configure the interface on the fire, then i get this message: set failed, may need to override template object ae3.826 first

it looks like the firewall knows the templete but doesn't roll it out. Panorama and firewall running 11.0.4-h2.

Is there a log or a menu in the gui to get more information?

Greetings

Re: Can't push after adding a new subinterface to newly created vsys

florence023 — Sat, 27 Jul 2024 04:16:56 GMT

@Alterhut wrote:

Hi folks,

I newly created a new vsys for my ha-pair in my panorama. I have also created a new device-group but only use a single template for both vsys.

I've tried to create a new subinterface in my new vsys. The interface is already connected to my first vsys. The commit on panorama works fine. The push to the device ends in a "commit failed". Here is a snippet from the devsrv.log:

<< (vsys3)>>
Error: unknown interface ae3.826
<</ (vsys3)>>

Official Site

If I try to manully to configure the interface on the fire, then i get this message: set failed, may need to override template object ae3.826 first

it looks like the firewall knows the templete but doesn't roll it out. Panorama and firewall running 11.0.4-h2.

Is there a log or a menu in the gui to get more information?

Greetings

Hello,

It seems you’re encountering a commit failure related to an unknown interface in your newly created vsys. Let’s troubleshoot this:

Check Interface Configuration:
Verify that the interface ae3.826 is correctly configured in your template.
Ensure that the template includes this subinterface for both vsys.
Template Push Order:
Confirm that you followed the correct order:
Import FW Config.
Commit to Panorama.
Export FW Bundle to FW (from within Panorama).
Push to Devices.
Push (again) to FW.
Log Inspection:
Check the configd.log file on the firewall for more details on the push failure.
Use the command less mp-log configd.log to identify where the push is failing.
Override Template Object:
If needed, override the template object ae3.826 on the firewall manually.
Then try pushing the configuration again.
Panorama GUI:
Unfortunately, there isn’t a specific GUI menu for detailed push failure logs.
However, reviewing the logs and following the steps above should help diagnose the issue.
Remember to document any changes you make during troubleshooting. Hopefully, this will resolve the issue and get your configuration pushed successfully!

Best regards,
florence023

topic Re: Can't push after adding a new subinterface to newly created vsys in General Topics

Can't push after adding a new subinterface to newly created vsys

Re: Can't push after adding a new subinterface to newly created vsys