Captive-Portal Error with MP Software Process 'keymgr' and 'l3svc' Problem

[animofernando]

Model : PA-500

OS: 6.1.13

Captive-Portal/GlobalProtect are used

Hi. I've got some issue from my customer about Captive Portal Issue.

The customer said, the Captive-Portal authentication screen, couldn't be seen for few days,

even if portal page open, like google, or other starting web-page, they couldn't access to other link with errors.

So I'd tried to access FW WebUI, but the web page couldn't load it.

Thankfully, SSH was accessable, so I checked the status of hardware, and software.

When I typed

> show system software status 

The result is shown as below

Among the all the mp process, I could find some issue at 'keymgr' and 'l3svc' process.

So, when I talked with customer, and I tried to restart that process, using two commands.

> debug software restart l3-service 

> debug software restart management-server

After I'd typed these commands, I checked the software status again, but the result was the same.

I'd opened a case already, and I'm going to restart device a couple of days later, but

before I do that I wanna know is there somethings that I could check about this issue.

Like, what made this issue has been occured, is there any other better solution, instead of reboot device, etc.

I want to hear some opinions.

Thx. 😄

[animofernando · Accepted solution]

Device had been restarted, so I've done OS upgrade.

And there were another problem, this device was using IPSec VPN, and the SPI key was not cleared,

so the number of SPI keys which were not cleared over 20,000.

So I suspected that was the problem for that issue. I coulnd't find the exact problem, though.