topic set readonly commands in General Topics

set readonly commands

luchette — Sat, 09 May 2020 01:33:25 GMT

Found a bunch of config lines as such. Where/how? Can't delete them. They don't appear in the GUI.

set readonly device-group grpname address-group NAME_LAN_GRP id 289
set readonly device-group grpname address-group NAME_LAN_GRP id 290
set readonly device-group grpname address-group NAME_LAN_GRP id 291
set readonly device-group grpname address-group NAME_LAN_GRP id 301
set readonly device-group grpname address-group NAME_LAN_GRP id 371
set readonly device-group grpname address-group NAME_LAN_GRP id 377
set readonly shared address-group NAME_LAN_GRP id 288

Re: set readonly commands

reaper — Sat, 09 May 2020 20:37:44 GMT

Those are panorama pushed, where the panorama admin disabled override

You need to edit those through panorama

Re: set readonly commands

luchette — Mon, 11 May 2020 22:58:18 GMT

I'm in Panorama and still can't delete:

admin@panorama(primary-active)# delete device-group 3PS2S address-group NAME_LAN_GRP

Object doesn't exist

In the Panorama GUI as admin, a search for this object returns nothing.

Re: set readonly commands

reaper — Mon, 11 May 2020 23:03:19 GMT

Is it possible that your firewall has been connected to a different panorama, or objects were removed from panorama and never committed somehow...