Panorama Validation error

[amrkaur]

Hi all,

I have cloned a template where I am changing the interface from 1g to 10g. Also, I am planning to retain the IP address. In the new template, GP gateway related configs are not being copied to the new template. So I added them manually . while committing in panorama , I am getting the below error.

• Validation Error:
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> interface 'ethernet1/17' is not a valid reference
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> interface is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip -> ipv4 'xxx.xxx.xx.xx/29' is not a valid reference
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip -> ipv4 is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address -> ip is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway -> XXE1 GP Gateway-N -> local-address is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel -> global-protect-gateway is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network -> tunnel is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices -> localhost.localdomain -> network is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config -> devices is invalid
  devices -> localhost.localdomain -> template -> xx-ce-fw001a -> config is invalid

I did raise a support case but no resolution from them so far.

Regards.

[ASudheer · Accepted solution]

Hi @amrkaur ,

This appears to be an issue with your template. I kindly request that you attempt to copy the template and proceed to remove the gateway related configuration, VR routers, and interface. Then, manually add the new interface along with the VR router configuration and gateway configuration. It is important to validate and commit after each change. By following these steps, you will be able to narrow down the issue and resolve it.

[amrkaur]

Thanks a lot @ASudheer