VSYS and LAG interfaces

Reply
L2 Linker

VSYS and LAG interfaces

Hi,

 

When using a basepolicy with 4 VSYS  and several AE and AE.Subinterfaces the output does not work as intended. It seems that a random amount of ae interfaces are kept, and alot of ae interfaces are discarded.

 

Replication steps:

 

1. Create a PA with 4 vsys and different ae interfaces

2. Import it as base in migration tool 3.1.6

3. Add a security ruleset from juniper(for example)

4. merge and output.

5. when importing to the PA again the interfaces are removed at random, comments are scattered, and alot of manual labour has to be done to fix it, even though the only thing added was a few security rules.

 

Hopefully my description was clear. If a fix could be added for this i would be eternally grateful!

 

Keep up the good work!

L7 Applicator

Re: VSYS and LAG interfaces

Hi,

 

Have you tried with 3.2? It was released 11 days ago with a bunch of fixes. Thanks

L2 Linker

Re: VSYS and LAG interfaces

Hi man,

 

Thanks for the quick reply.

 

Tried it today with the updates version, with the same result.

 

VSYS in combination with AE interfaces seems to cause a bit of issues. The interfaces are removed again, aswell as comments and some of the virtual routers.

L7 Applicator

Re: VSYS and LAG interfaces

Hi,

 

It will help us a lot if you can send us that config to fwmigrate@paloaltonetworks.com for investigation. Then if you can point us what is missed will speed up the process :-)

 

Thanks !

L7 Applicator

Re: VSYS and LAG interfaces

We found the issue and between today and tomorrow we will release 3.2.2 with the fix.

 

thanks !

Highlighted
L2 Linker

Re: VSYS and LAG interfaces

Wow guys, 3.2.2 fixed the issue!

 

Hats off to you, fantastic job!

 

Please take over the development of Panos aswell :)

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!