Unable to see running config by CLI in a cluster with PA-3060s managed by Panorama.

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Unable to see running config by CLI in a cluster with PA-3060s managed by Panorama.

L3 Networker

Hi all,

 

Maybe you can give me any clue with this issue:

 

I have a pair of PA-3060 managed by a Panorama and the deployment works fine.

 

But I´m unable to see the running configuration on the cluster members by CLI. The only shown is the parameters concerning the deviconfig and all the other configurations are not listed. I tried with the same result the following commands:

 

> show config running

 

> show config saved running-config.xml

 

> set cli config-output-format set
> configure
> show

 

 

The configuration is properly shown when accessing by WebUI. I tried to reboot the members but everything remains the same.

 

I´d really appreciate some advice from you. Thanks in advance,

Marcos.

 

 

3 REPLIES 3

L4 Transporter

This is normal behavior. Configuration pushed by Panorama (rules, objects) are not part of the local configuration and therefore do not appear on local CLI. You can use the "show running ..." to see the rules loaded into dataplane, etc.

Many thanks for the info.

 

I have one last question with which maybe you can help me as well: when exporting a config bundle from Panorama, the config XML file for the pair of 3060s is empty. What could I be doing wrong??

 

Thanks again,

Marcos.

While it is true the panorama pushed config is not visible in the normal config commands, you can actually see the 'pushed' config by using the commands:

 

admin@firewall> show config pushed-
> pushed-shared-policy   Shared policy pushed to the device
> pushed-template        Template pushed to the device

how exactly are you exporting a config bundle off of panorama? by using the scheduled config export or by other means ?

Tom Piens
PANgurus - (co)managed services and consultancy
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!