09-02-2021 07:19 AM
first of all - I m new and I would like to apologize first of all, if the theat should have been opened wrongly, or my english should be a little bit **bleep** 😉
I cannot open/edit anything in a template stack under template->network->interface
Zones and other things in the stack re working fine but if i click on a interface e.g. ethernet1/1 the window for the interface is popping up for some milli seconds and is closing directy.
I ve tested serval browsers on serval computers - restartet and updated panorama.
the editing on a template works well:
but not on a template stack (all stacks)
As panorama admin everything is working. The problem is only happen when I use a user with the type "Device Group and Template Admin"
I ve created a user with the type "Device Group and Template Admin" and one access domain and one admin role.
in the admin role i ve enables everything for the webui excluding panorama, save for other admins and commit for other admins but the network part is complety allowed.
The template and the stack re also included
I m using Panorama 10.0.7 (same problem was also with 10.0.6 and 10.0.5)
i couldn't find anything on the internet and just don't know what to do. i've been despairing about this problem for a very very long time. Maybe someone can help me , maybe it is a really stupid configuration issue. but i cannot find it. i played a lot with the rights but only as panorama admin it works in the stack.
Thanks a lot!
09-24-2021 12:31 AM
Thank you for reply @Kai_Ulrich and sorry for getting back to you with delay.
I was trying to reproduce the issue you are facing, however in all my attempts using exactly the same scenario it was working as expected. Based on your screen shots and description you provided it looks like there is no misconfiguration. I would advice to open a ticket to TAC or to your Palo Alto partner if you have such option.
09-24-2021 02:02 AM
thank you very much for your effort!
I have opened a ticket and will post the result here as soon as i got feedback.
10-26-2021 06:14 AM
Hello @PavelK ,
here the answer from Palo Alto:
I would like to update that we have been able to replicate this issue in our lab. It seems as if the concerned issue is only observed for the DG&T admin when SDWAN plugin is installed but not configured on Panorama.
We are discussing this internally if it requires another code change or the aforementioned change in 10.1.3 should be sufficient.
Meanwhile, since i see that the SDWAN is not configured on this Panorama, as a workaround we can remove the SDWAN plugin from this Panorama if acceptable.
I ve uninstalled the plugin and it works 🙂
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!