cannot commit - failure parsing config response module dhcpd

[LCMember2099]

I cannot commit changes on a PA-850 running 10.1.3

The error message shows below.  What is the cause of this error?

---

Details

Failure parsing config response (Module: dhcpd)

client dhcpd phase 1 failure

Commit failed

---

Duplicate certificate subject found

Warning: tunnel tunnel.2 ipv6 is not enabled.  IPv6 address will be ignored!

[AnalysisMan]

Why don't you check the logs with 'less mp-log ms.log' via CLI?
The error is related to DHCP configurations.

Thanks,

[PavelK]

Thank you for the post @LCMember2099 

Could you try to restart DHCP or management process to see this error goes away?

debug software restart process dhcp

debug software restart process management-server

If this does not resolve the issue, could you have a look into logs:  tail lines 100 mp-log pan_dhcpd.log

Was there any change prior to this issue?

Kind Regards

Pavel

[TomYoung]

Hi @LCMember2099 ,

Ensure the subnet of the DHCP pool matches the interface IP address to which the pool is configured.

Thanks,

Tom

PS Delete the unused cert with the duplicate CN and enable IPv6 under tunnel.2 to get rid of your 2 warnings.  You do not need to supply an IPv6 address.  Just check the box.

[LCMember2099]

One of the interface originally had DHCP enabled.  We added the DHCP config back and was able to commit.  We then deleted the DHCP config and was still able to commit.  Weird.