Commit Failed (4.0.4)

[Duplem]

Hello,

Commit on our PA4050 Cluster running in Active-Passive mode on PANOS 4.0.4 is not working since today.

We get the following messages :

Operation	Commit
Status	Completed
Result	Failed
Details	device: config commit phase 1 aborted Management server failed to send phase 1 to client pppoed Management server failed to send phase 1 abort to client pppoed Commit failed

Could you please help us to diagnose and resolve this issue  ?

Best Regards,

Emmanuel Duplaa

[gswcowboy]

See if you're mgmtsrv or devsrvr procesess are running high memory utilizaton.

>show system resources | match mgmt

>show system resources | match dev

You could restart the processes but I'd recommend calling into PAN Support as you're in a clustered deployment to make sure nothing goes awry.

[friento]

This is still happenning on 4.05. So frustrating.

[gswcowboy]

Please call into PAN Support to further analyze the issue incurred on 4.0.5 @friento

[Duplem · Accepted solution]

Hello,

Here comes the final feedback for this issue.

We solved the problem by restarting the whole management plane in order to restart pppoed process.

So we did a switchover, and then type "request restart software" on passive member. Back on it, commit was working like a charm.

However, this is a workaround, not a solution. Hope PA will soon find a definitive patch

Best Regards,

Emmanuel

[gswcowboy]

Hello Emmanuel,

Glad it worked out in the end. I would request an upgrade to PANOS 4.0.5. However, this would require a reboot so a maintenance window is recommended. If the issue resurfaces, I encourage you to call PAN Support so that we can assist with debugging the issue.

Regards,

Renato

[jargal]

Hello,

My device PA500 mode PANOS is 4.0.5 not working yesterday.

Following message error:

    device: config commit phase 1 aborted
    Management server failed to send phase 1 to client ikemgr
    Management server failed to send phase 1 abort to client ikemgr
    Commit failed

So open "network" tab and click IPSec tunnel

Following message error: error: op command for client ikemgr timed out

Please help !

[mikand]

1) Does "debug software restart management-server" solve your issue?

2) If not, does a complete reboot of the whole box solve your issue?

3) If not, does an upgrade (if possible) to latest 4.1.x (currently 4.1.4 if im not mistaken) solve your issue?

Regarding upgrade you need (I think) first upgrade to 4.1.0 and then upgrade to latest (4.1.4?).

[Duplem · Accepted solution]

Hello,

I thought I kept you updated about this problem. It is solved for months now.

A "debug software restart management-server" command solved the issue.

We have also upgraded our software version to 4.0.8 few weeks after to prevent any new occurrence.

Best regards,

/duplem