Question About Panorama VR || CAN ADD SINGLE ROUTE WITHIN A VIRTUAL ROUTER FROM TEMPLATE IN PANORAMA

[Sethupathi]

Hi Team,

Can anyone provide your valuable suggestions, If no any other alternate way please. 

I'm facing issue with configuration of the devices using panorama. Please find the details of the issue mentioned below.

1)      Using panorama access enabled for the IP address X.X.X.X in policies and created route for the same in network tab.

2)      The changes were then committed in panorama and then pushed to device.

3)      The changes are visible in panorama .

4)      But when checked in device instance we are able to see that the changes are applied to policy only , no changes are reflecting in network tab.

I added a single/individual routes within a virtual router from a template in PANORAMA,  The VR with same name exists on both Panorama and a managed firewall.

Could you please help us here?

Regards,

Sethupathi M

[Neil_Xu]

What version of the code are you running on Panorama and your Firewalls?

[SCantwell_IM]

Are you even sure that your template info is being pushed down to the FWs?

Use the Tasks button (lower right hand of GUI) on FW, to ensure the Commit from Panorama is successful.

If need be, have you attempted (through the push from Panorama) to Force Template Values (Push to Objects --> Edit, Template tab)

Does your Panorama show that your FW(s) are In Sync or Out of Sync, when you look at your Managed Devices?

Oh, and screen captures are recommended as well.  😛

[DerrickKelly]

Make sure the config that you are trying to apply from Panorama does not have a override condition on the local firewall, notice the yellow and green icon on local firewall side.

Before clicking revert on local firewall for the config you are trying to manipulate, ensure the template from panorama has all of the correct settings to ensure you do not cause a disruption. There is a strong possibility your config is being sent but since you have override on local fw side the pushed panorama changes are not being applied.