Lost all MGT-server functionality after upgrade

Bocsa — Thu, 08 Mar 2018 21:37:12 GMT

After upgrading a PA200 to version 8.0.8, firewall comes back up but I seem to have lost all management-server functionality on the box. I am unable to commit changes, unable to download updates or software, unable to revert and unable to access the Palo's GUI. Access to SSH still works somehow.

Ran some debugs when trying to commit...a portion of the logs are below.

Any thoughts please?

2018-03-08 21:05:40.602 -0800 Error: pan_cfg_eval_constrained_xpath_do_merge(pan_cfg_utils.c:1895): error evaluating xpath: ../../../../../../../../../../network/interface/ethernet1/1/ip/entry/@name
2018-03-08 21:05:40.602 -0800 Error: pan_cfg_get_string_completions_do_merge(pan_cfg_utils.c:3733): Could not evaluate xpath ../../../../../../../../../../network/interface/$ifname/ip/entry/@name, going to next xpath
'cfg.corr.enabled': NO_MATCHES
'cfg.corr.enabled': NO_MATCHES
2018-03-08 21:05:55.407 -0800 Error: pan_parse_websrvr_tls_service_profile(pan_system_settings.c:2461): missing name parameter
2018-03-08 21:06:18.931 -0800 Error: _pan_mgmt_client_send_phase1(pan_cfg_commit_jobs.c:1575): modify failed: NO_MATCHES
2018-03-08 21:06:18.933 -0800 Error: pan_mgmt_client_table_do_phase1(pan_cfg_commit_jobs.c:2577): Management server failed to send phase 1 to client websrvr2018-03-08 21:06:20.325 -0800 Error: pan_mgmt_client_table_do_commit(pan_cfg_commit_jobs.c:3587): failed to initiate phase 1
2018-03-08 21:06:34.174 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.179 -0800 Error: pan_mgmt_client_send_phase1_abort(pan_cfg_commit_jobs.c:1654): modify failed: NO_MATCHES
2018-03-08 21:06:34.181 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.192 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.195 -0800 Error: pan_mgmt_client_err_callback(pan_cfg_commit_jobs.c:826): but there was no outstanding Phase 0/Phase 1/Phase 2. Ignoring - verify: 0
2018-03-08 21:06:34.203 -0800 Error: pan_cfg_commit_to_local_device(pan_cfg_commit_handler.c:3110): Commit failed

Re: Lost all MGT-server functionality after upgrade

OtakarKlier — Thu, 08 Mar 2018 22:39:04 GMT

Hello,

Try to restart the management UI:

debug software restart process management-server

You will lose the ssh session and it might take a few minutes to get it back online.

Regards,

Re: Lost all MGT-server functionality after upgrade

Bocsa — Fri, 09 Mar 2018 09:36:34 GMT

Hi,

I tried this already....as well as restarting web-server and device-server processes. That didn't help.

Re: Lost all MGT-server functionality after upgrade

OtakarKlier — Fri, 09 Mar 2018 16:12:42 GMT

Hello,

I would say open a tac case if you havent already and make it a sev1.

Good luck.

Re: Lost all MGT-server functionality after upgrade

hshawn — Mon, 12 Mar 2018 22:44:41 GMT

If it comes down to it you can do a

debug swm status

to check to see if you can rollback to prior install. If you need to rollback a

debug swm revert

should do the trick

topic Lost all MGT-server functionality after upgrade in General Topics

Lost all MGT-server functionality after upgrade

Re: Lost all MGT-server functionality after upgrade

Re: Lost all MGT-server functionality after upgrade

Re: Lost all MGT-server functionality after upgrade

Re: Lost all MGT-server functionality after upgrade