Redistribution UIA not working...... INTERNAL ERROR

[BigPalo]

Hi,

I configured a PA in order to redistribute UIA mappings to another FWs. All the config is OK but its not working.

I can see this in the FW redistributing:

(active)> show redistribution service status

Redistribution info:
Redistribution service: down
Reason: internal error

i tried to restart process UIA MGMTServer....

any idea about what is happening?

[kiwi · Accepted solution]

Hi @BigPalo ,

Too little information to identify the problem I'm afraid.

I'm guessing you use the mgmt interface for redistribution ?

Are there any devices in between the agent and clients that could block the redistribution ?

Is routing set up correctly between agent and clients ?

Some redistribution troubleshooting commands can be found here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-n...

Any chance of doing a TCPdump during the time of the issue and provide more info on the agent configuration?

Any more information you can see in system.log or distributord.log ?

Kind regards,

-Kim.

[BigPalo]

I'm guessing you use the mgmt interface for redistribution ? No, service routes for UIA in a service interface. No MGMT.

Are there any devices in between the agent and clients that could block the redistribution ? FWs but this traffic is allowed.

Is routing set up correctly between agent and clients ? Yes

The error in the FW redistributing is INTERNAL ERROR. This means any service or proccess issue right? more than config or connectivity issue

Some redistribution troubleshooting commands can be found here:

https://docs.paloaltonetworks.com/pan-os/11-1/pan-os-admin/user-id/deploy-user-id-in-a-large-scale-n...

i will check it

Any chance of doing a TCPdump during the time of the issue and provide more info on the agent configuration?

Any more information you can see in system.log or distributord.log ? I will check distributord.log. UserIDd nothings related to this

[BigPalo]

I activated USERID in the interface management profile in the Ethernet1 and restart userdid proccess and its working.

thanks