topic Re: Troubleshooting device with orange status light in General Topics

Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 03:21:23 GMT

Greetings all!

I have a pan200 with an orange status light. Power, fan and temp are all green. Status stays this way through reboots and the web server on the mgmt port is not responding.

If I console in, the only issues I have seen so far are the TP licenses just expired. I would love some pointers are troubleshooting commands to run to figure out what is going on.

Re: Troubleshooting device with orange status light

harshanatarajan — Thu, 22 Aug 2013 03:29:47 GMT

How long has it been since the status light is orange ? The device has to complete a auto commit when the device reboots. Once the auto commit completes then the status light turns green. I would at least wait for 15-20 minutes for the auto commit to complete and the status light to turn green.

Re: Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 03:30:50 GMT

It has been orange for about four days. 😛 After the past reboot, it has been powered on for a full 24 hours.

Re: Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 03:34:02 GMT

I take it back. The current up time is over 2 days.

Re: Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 03:39:51 GMT

It also does not respond to pings or pass traffic. This was NOT following any software update or anything. Client left office one day and it worked fine and next morning, it was in this state.

Re: Troubleshooting device with orange status light

harshanatarajan — Thu, 22 Aug 2013 03:56:03 GMT

What PAN OS version is the firewall currently running ? Have you tried a hard reboot (unplug the power cable wait for 5 minutes and then replug the power cable back) on the firewall. Can you paste the output of -

>show jobs all

>show management-clients

Re: Troubleshooting device with orange status light

Retired Member — Thu, 22 Aug 2013 06:20:01 GMT

you may do factory reset after backing up the config.

Re: Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 12:37:20 GMT

show jobs all doesn't show anything running.

Client PRI State Progress

-------------------------------------------------------------------------

routed 30 init 0

ha_agent 25 init 0

device 20 init 0

ikemgr 10 init 0

keymgr 10 init 0 (op cmds only)

logrcvr 10 init 0

dhcpd 10 init 0

varrcvr 10 init 0

l3svc 10 init 0

sslvpn 10 init 0

rasmgr 10 init 0

useridd 10 init 0

satd 10 init 0

websrvr 10 init 0

sslmgr 10 init 0

authd 10 init 0

pppoed 10 init 0

dnsproxyd 10 init 0

Overall status: init. Progress: 0 0 (op cmds only)

Warnings:

Re: Troubleshooting device with orange status light

SDorsey — Thu, 22 Aug 2013 12:38:06 GMT

panos wrote:

you may do factory reset after backing up the config.

Is there an easy way to backup the config with only console access? I don't have an scp box onsite to shoot the config to. That was the only option I saw.

Re: Troubleshooting device with orange status light

Retired Member — Thu, 22 Aug 2013 12:55:41 GMT

I don't know except for scp or tftp

if you don't have backup file for a working one maybe you can try

How to Reinstall or Revert PAN-OS from Maintenance Mode

Reinstall or revert from Maintenance mode.

Re: Troubleshooting device with orange status light

Poe — Thu, 22 Aug 2013 15:56:18 GMT

Is it possible to install a TFTP client on your local system and then use "tftp export ..." to export the running configuration file? You may want to view this to ensure your running config is the config you want.

I have a PA-200 I am building for a site now, and the light for status is off during bootup, then shows orange, then goes green. Under the State for "show management-clients" it shows "P2-Ok" and a progress of 100 on most of the items that show as init for you. The last time I had an issue with a box not responding to management interface it was an RMA after support could not fix the issue.