- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
07-11-2017 05:40 PM
I experienced an issue when using the UI in 7.1.11 on a PAN 5060
I disabled "Preemptive" in the "Elections Settings" area of the "Device -> High Availability -> General" page in 7.1.10. It has a template from Panorama, so the change is saved as an override.
I upgraded to 7.1.11. When I tried to enable "Preemptive", by reverting the override, the UI freezes. If I reload the page, the change is not recorded.
But if I delete the setting from the CLI, then run a commit from the UI, the setting is restored. But any attempt to edit is causes the UI to freeze.
(active)> configure
Entering configuration mode
[edit]
(active)# delete deviceconfig high-availability group 1 election-option preemptive
[edit]
(active)# exit
Exiting configuration mode
07-11-2017 06:23 PM
Hi,
Could you enable debug on GUI:
https://<ip-address>/debug
https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Run-a-PAN-OS-Web-UI-Debug/ta-p/58117
Then do the changes you are talking about from GUI, and then refresh the debugs.
If the debugs dont give much idea, please open a case with TAC. This may be a software issue they can help take a look into.
BR
07-19-2017 12:15 AM
Yes, I get a PHP Fatal error
[19-Jul-2017 07:13:24 UTC] PHP Fatal error: Call to a member function asXML() on a non-object in /var/appweb/htdocs/php/device/ha/HAElection.php on line 124
07-19-2017 08:18 AM - edited 07-19-2017 08:18 AM
It looks like your HAElection is corrupt. I would recommend that you try reinstalling 7.1.11 and see if that fixes your issue; it sounds like something didn't get unpacked correctly during your update.
07-19-2017 10:03 AM
I had the same problem on an old 2020 ... this happened when I migrated the firewall from local to panorama management including HA settings ... but I did not think about this further ... used the CLI --> problem solved
I then also decided to do ALL HA configs only local because with panorama it is more a pain for HA settings than a help
07-19-2017 10:56 AM
Alas the CLI is working because you aren't relying on the PHP script as stated in the error.
/var/appweb/htdocs/php/device/ha/HAElection.php
It really depends on how bad you want this to work. A reinstall of the OS should get this to work correctly, or just use the CLI as you did previously in your first post. My personal choice would be the CLI path but I don't do a lot of configuration work in the GUI so that's a natural progression for me, but I also don't have to worry about another admin working on my devices.
07-19-2017 11:15 AM
The issue was only present when there are values in a panorama template. After I removed the template values it is possible again to configure all HA settings on the local device.
My personal advice in addition to @BPry's is: configure HA settings only locally
07-19-2017 11:19 AM
Interesting. I wonder if including a value in a panorama template removes the member object in the config file that the .php script is trying to target?
07-19-2017 11:55 AM
Could be ... I don't know ... for me the issue was not important enough (workaround was too simple), to open a case and spend more time into this one
07-19-2017 05:51 PM
Reinstall did not work 😞
Also this happened on all four of my Palo 5060's.
les
07-27-2017 06:58 PM
I see a similar issue in the database and looks like its addresses in 8.0. Is it possible to give 8.0.X a try?
I woul suggest to open a TAC case so that they can help investigate more and if applicable request a backport in 7.1
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!