In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible

Aoosthuizen — Mon, 04 Dec 2017 10:32:18 GMT

Hi Guys

I have created a new parant Device group that contains shared rules for sub device groups under it. The rulease are zone specific and this is where the problem comes in, I get the error below when commiting to specific device.

Last Push State Details
Details:
. In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible in security rule sec_afr_permit_panorama_out
. In VSYS vsys1 from zone MPLS of type unknown and to zone inside of type layer3 are incompatible in security rule sec_afr_permit_panorama_in
. In VSYS vsys1 from zone mpls-outside of type vwire and to zone inside of type layer3 are incompatible in security rule sec_afr_permit_panorama_in
. Configuration is invalid
Warnings:

How do I resolve this as I am not sure if the problem is in the Parent device group or the actual device template.

Re: In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible

rmfalconer — Mon, 04 Dec 2017 18:50:44 GMT

Each zone referenced in a security rule must be of the same type. You can't have a source zone of vwire and a destination of L3.

topic Re: In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible in General Topics

In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible

Re: In VSYS vsys1 from zone inside of type layer3 and to zone MPLS of type unknown are incompatible