How does Validate Commit function work in PAN OS 9.0.9?

Luke_Franzelas — Fri, 19 Feb 2021 23:16:18 GMT

I'm wondering if the validation process is checking the change against the running config and not taking into account the Interface IP change in the candidate config while doing the validation.

I am trying to make a change to both the IP address of the outside interface and the associated default static route

When a validate commit I get the following error

Static route default route next hop IP x.x.x.x is not in subnet of outgoing interface ethernet1/3

Now I've checked. I have no typos in my interface address or my route and I've used a default. the next hop address is the first useable in the /29 subnet and the ethernet1/3 is the last useable address in the subnet.

Re: How does Validate Commit function work in PAN OS 9.0.9?

nikoolayy1 — Sun, 21 Mar 2021 22:17:30 GMT

If you want you can test commit force https://live.paloaltonetworks.com/t5/general-topics/difference-between-commit-and-commit-force/td-p/273995 to bypass the check in your case but be carefull and read about this. Also make certain that you are changing the IP addresses on the interface as when I use CLI many times I add an ip address and the old still there, so I end up with 2 IP addresses, so use the GUI and first remove the old one then add the new.

topic Re: How does Validate Commit function work in PAN OS 9.0.9? in General Topics

How does Validate Commit function work in PAN OS 9.0.9?

Re: How does Validate Commit function work in PAN OS 9.0.9?