Error The number of PBF return addresses cannot exceed 8 paloalto

Alpalo — Wed, 11 Dec 2024 09:51:26 GMT

HI team

We are migrating a FW Paloalto model 3250 to a model 1420 but I find a limitation, in the previous model I had 16 PBF but now it only allows me 13. Do you know if it is a limitation of the model?

2024-12-10 17:45:19.569 +0100 Error: pan_pbf_policy_from_obj(pan_config_parser.c:18674): The number of PBF return addresses cannot exceed 8

2024-12-10 17:45:19.569 +0100 Error: pan_rulebase_from_obj(pan_config_parser.c:19445): Failed to parse pbf policy

2024-12-10 17:45:19.569 +0100 Error: pan_vsys_from_obj(pan_config_parser.c:29127): pan_rulebases_from_obj failed

2024-12-10 17:45:19.577 +0100 Error: pan_config_from_obj(pan_config_parser.c:30410): pan_vsyses_from_obj failed

2024-12-10 17:45:19.637 +0100 Error: pan_ctrl_save_config(pan_config_handler_sysd.c:2211): Error compiling config

<<vsys1>>

Error: Failed to parse pbf policy

<</vsys1>>

Regards

Re: Error The number of PBF return addresses cannot exceed 8 paloalto

kiwi — Wed, 11 Dec 2024 11:28:49 GMT

Hi @Alpalo ,

The maximum number of return addresses depends on the platform.

You can issue the following CLI command to know the limit on your device... notice in the example below, a PA-3410, the system returns 0x8:

pa-admin> show system state | match max-return-address cfg.general.max-return-address: 0x8

Hope this helps,

-Kim.

topic Error The number of PBF return addresses cannot exceed 8 paloalto in General Topics

Error The number of PBF return addresses cannot exceed 8 paloalto

Re: Error The number of PBF return addresses cannot exceed 8 paloalto