Reference not valid--Panorama

[Farzana]

Hello,

Trying to deploy a new subinterface via a Panorama template to two PA-3060 devices but getting error below

•  Validation Error:
• . import -> network -> interface 'ethernet1/6.52' is not a valid reference
• . import -> network -> interface is invalid
• . Commit failed

It doesn't matter what name or VLAN ID I give the interface, it does not allow to deploy the template to the devices.  We do have template override on the devices for that interface, however I cannot create it manually on the devices because then I can't create rules via Panorama.

Already tried with and without the security zone, checked App and Threat DB match, Panorama and two units are 7.0.3. Checked known bug issues...

Panorama config:

Device config:

Any suggestion?

Thanks in advance.

[Farzana · Accepted solution]

Hello,

Just wanted to let provide an update/solution for the issue incase someone also faces similar problem.

During maintenance window, performed the following.

Back up firewall configuration
Remove Panorama Settings (IP address and Don’t import anything)
Click OK
Edit it again and enable both Policy and Device objects.
Click OK
From Panorama, commit Device Group (including the new sub-interface).

Thanks.

[reaper]

one thing that pops up is the absense of a vsys in that interface (the 'none' bit), you may need to set the vsys

else, try deleting the interface, push the config, re-create the interface, push again

[Farzana · Accepted solution]

Hello,

Just wanted to let provide an update/solution for the issue incase someone also faces similar problem.

During maintenance window, performed the following.

Back up firewall configuration
Remove Panorama Settings (IP address and Don’t import anything)
Click OK
Edit it again and enable both Policy and Device objects.
Click OK
From Panorama, commit Device Group (including the new sub-interface).

Thanks.