Cisco ASA - Unable to upload config file

[Tien_Vo]

Currently migrating ASA to PA-3220. It looks like process is stuck at phase 2 when trying to upload ASA config file.  I have tried two different ASA config file but process seems to be hung and unable to complete.

[lychiang]

Hello @Tien_Vo 

Could you please try to upgrade your Expedition to latest release v1.1.77 and try again.  If it still not working, please open a TAC case and you can share the Cisco ASA config vis TAC case.  

Thank you!

[dgildelaig]

The importing & conversion process leaves some logs in the /tmp/error file.

Could you check if this file shows messages that can help identifying the source of the issue?
If the information in there seems sensitive, please attach that file in the TAC case as well.

[Tien_Vo]

Currently, running on version 1.1.76.1 and when trying to update to 1.1.77, this is the issue that I ran into(13: Permission denied).

$ apt-get update
Reading package lists... Done
W: chmod 0700 of directory /var/lib/apt/lists/partial failed - SetupAPTPartialDirectory (1: Operation not permitted)
E: Could not open lock file /var/lib/apt/lists/lock - open (13: Permission denied)
E: Unable to lock directory /var/lib/apt/lists/
W: Problem unlinking the file /var/cache/apt/pkgcache.bin - RemoveCaches (13: Permission denied)
W: Problem unlinking the file /var/cache/apt/srcpkgcache.bin - RemoveCaches (13: Permission denied)

[azuniga]

Please make sure that you are running those commands as a sudoer. You may not have sudo access on the current user profile and that's why you do not have permission.

[Tien_Vo]

Updated successfully to 1.1.80 but this did not resolve the ASA uploading configuration issue.  Running into same problem as before, looks like the import is stuck at phase 2 in the process > File:AD2_config.txt Phase 2 Loading Address Objects.  

Any ideas?

[azuniga]

@Tien_Vo 

Did you check the /tmp/error file as suggested? Please share those details, and if you are still having issues please provide us with the TAC case number so we can attempt to replicate the issue.

Once you have uploaded your config to the TAC case please email us at fwmigrate@paloaltonetworks.com to give us that TAC case number so that we can see what the issue is.

[Tien_Vo]

Here are the details from /tmp/error.

Notice: Trying to get property of non-object in /var/www/html/libs/shared.php on line 2648

Notice: Trying to get property of non-object in /var/www/html/bin/configurations/parsers/Cisco/CISCO.php on line 9061

Fatal error: Uncaught Error: Call to a member function fetch_assoc() on boolean in /var/www/html/bin/configurations/pars ers/Cisco/CISCO.php:9199
Stack trace:
#0 /var/www/html/bin/configurations/parsers/Cisco/CISCO.php(670): get_interfaces(Array, 0, 'vsys1', 0)
#1 /var/www/html/bin/configurations/parsers/Cisco/CISCO.php(502): import_config('/home/userSpace...', 'ASAtoPA3220', 'AD 2_config.txt', 😎
#2 {main}
thrown in /var/www/html/bin/configurations/parsers/Cisco/CISCO.php on line 9199
n line 9199

[azuniga]

@Tien_Vo 

Go ahead and open that TAC case and send us an email with the TAC case number, it looks like expedition is having an issue parsing through the config you are importing. We will need to see why that's happening.

[Tien_Vo]

Email sent.  Thank you.

[ETate]

Hello,

I am having the same identical issue.  Can I open a TAC case and share the number with you for assistance, as well?

Thanks,

[ETate]

 Below are the errors I am getting in my $cat /temp/error output:

Thanks for your support