Reference not valid--Panorama

[Farzana]

Hello,

Trying to deploy a new subinterface via a Panorama template to two PA-3060 devices but getting error below

•  Validation Error:
• . import -> network -> interface 'ethernet1/6.52' is not a valid reference
• . import -> network -> interface is invalid
• . Commit failed

It doesn't matter what name or VLAN ID I give the interface, it does not allow to deploy the template to the devices.  We do have template override on the devices for that interface, however I cannot create it manually on the devices because then I can't create rules via Panorama.

Already tried with and without the security zone, checked App and Threat DB match, Panorama and two units are 7.0.3. Checked known bug issues...

Panorama config:

Device config:

Any suggestion?

Thanks in advance.

[reaper]

one thing that pops up is the absense of a vsys in that interface (the 'none' bit), you may need to set the vsys

else, try deleting the interface, push the config, re-create the interface, push again

[Farzana · Accepted solution]

Hello,

Just wanted to let provide an update/solution for the issue incase someone also faces similar problem.

During maintenance window, performed the following.

Back up firewall configuration
Remove Panorama Settings (IP address and Don’t import anything)
Click OK
Edit it again and enable both Policy and Device objects.
Click OK
From Panorama, commit Device Group (including the new sub-interface).

Thanks.

[Deepak25]

I have faced same issue. To resolve did following steps :

1. Reverted the changes

2. First added interface through panorama

3. Then added sub-interface successfully

[ImranFarooq]

HI Farzana,

i am having the same issue.

my panorama version is 9.1.14-h1.

on your solution you mention remove panorama settings. i have removed it. do i need to commit it first before i push the config from panorama?

Thanks in advance