About kevinospf

Hi Serial number is got from palo alto firewall, we try to add the firewall into panorama. but I got the error message as below picture. This firewall is the first one to be added to panorama. why it has Maximum issue? Thanks        ... View more

Hi The issue on panorama is there for long time. Anyone can help to resolve it? When panorama vm is created on eve-ng on ESXi, its speed is very slow and even stop or stuck there. I found the slowness is related with memory and storage size available. because i can see the panorama vm storage utilization become more and more until the storage is full and stuck there. Please see the below picture. I wonder if this is panorama vm issue or eve configuration issue? the default size of storage for each vm is about 60GB. Looks like the 60GB is a limitation. I cannot assign a bigger size. Can we assign a bigger one during initial config for eve? That is why i changed the storage size from 60GB to 200GB after the initial config, but the added size cannot be used and also cannot be expanded as available. Anyone can share experience? Thanks         ... View more

Hi Panorama version 10.2.3 start to run. but it always show like the below picture. default password and username are admin. and it never work. Anyone has experience to share? Thank you!     ... View more

Hi Anyone can help to take a look at the below error message after Panorama started to boot? Thanks     [<ffffffff8114bb1d>] ext3_writeback_writepage+0xc4/0x159 [<ffffffff810b80bd>] __writepage+0xe/0x26 [<ffffffff810b8561>] write_cache_pages+0x25d/0x36a [<ffffffff810b80af>] ? mapping_tagged+0xf/0xf [<ffffffff810b86a7>] generic_writepages+0x39/0x51 [<ffffffff810b9937>] do_writepages+0x20/0x27 [<ffffffff8111257e>] __writeback_single_inode+0x4f/0x1c3 [<ffffffff8111305b>] writeback_sb_inodes+0x1bf/0x2f8 [<ffffffff8111320e>] __writeback_inodes_wb+0x7a/0xb0 [<ffffffff811133f8>] wb_writeback+0x115/0x26a [<ffffffff81113afe>] wb_do_writeback+0x12d/0x1b8 [<ffffffff81113c07>] bdi_writeback_workfn+0x7e/0x185 [<ffffffff81053e42>] process_one_work+0x1df/0x354 [<ffffffff81054add>] worker_thread+0x1d5/0x2c1 [<ffffffff81054908>] ? rescuer_thread+0x272/0x272 [<ffffffff81058fba>] kthread+0xb5/0xbd [<ffffffff81058f05>] ? kthread_create_on_node+0x10e/0x10e [<ffffffff814ae6d8>] ret_from_fork+0x58/0x90 [<ffffffff81058f05>] ? kthread_create_on_node+0x10e/0x10e INFO: task kjournald:653 blocked for more than 120 seconds. "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. ffff88042ace3c68 0000000000000046 ffff88042ace3fd8 ffff88042ace3fd8 0000000000012340 ffff88042b230280 ffff88042adbe4f0 ffff88042aef2808 0000000000000001 ffff88042aef27d8 0000000010200001 ffff88042ace3bd0 Call Trace: [<ffffffff811f7363>] ? elv_rb_add+0x5f/0x61 [<ffffffff8120e149>] ? cfq_add_rq_rb+0x62/0x88 [<ffffffff8120e34e>] ? cfq_insert_request+0x1df/0x395 [<ffffffff81031511>] ? kvm_clock_read+0x1f/0x21 [<ffffffff8103151c>] ? kvm_clock_get_cycles+0x9/0xb [<ffffffff81117788>] ? generic_block_bmap+0x40/0x40 [<ffffffff814a6eb8>] schedule+0x64/0x66 [<ffffffff814a70a2>] io_schedule+0x8a/0xc8 [<ffffffff81117791>] sleep_on_buffer+0x9/0xd [<ffffffff814a5731>] __wait_on_bit+0x41/0x71 [<ffffffff814a57d7>] out_of_line_wait_on_bit+0x76/0x81 [<ffffffff81117788>] ? generic_block_bmap+0x40/0x40 [<ffffffff81059a0a>] ? autoremove_wake_function+0x2f/0x2f [<ffffffff81117829>] __wait_on_buffer+0x21/0x23 [<ffffffff811a5621>] journal_commit_transaction+0x94a/0xf4d [<ffffffff811a8a42>] kjournald+0xd7/0x23f [<ffffffff810599db>] ? wake_up_bit+0x25/0x25 [<ffffffff811a896b>] ? commit_timeout+0xb/0xb [<ffffffff81058fba>] kthread+0xb5/0xbd [<ffffffff81058f05>] ? kthread_create_on_node+0x10e/0x10e [<ffffffff814ae6d8>] ret_from_fork+0x58/0x90 [<ffffffff81058f05>] ? kthread_create_on_node+0x10e/0x10e   ... View more

Hi VPN is configured at two PA based on the below link and the two PA can ping each other, but the vpn cannot work. I tested it with below commands. Anyone can help to fix it? Thank you   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClGkCAK     admin@PA-VM> test vpn ipsec-sa Start time: Aug.07 07:48:19 Initiate 2 IPSec SA. admin@PA-VM> admin@PA-VM> show vpn ipsec-sa There is no IPSec SA found. admin@PA-VM> admin@PA-VM> show vpn ike-sa There is no IKEv1 phase-1 SA found. There is no IKEv1 phase-2 SA found. IKEv2 SAs Gateway ID Peer-Address Gateway Name Role SN Algorithm Established Expiration Xt Child ST ---------- ------------ ------------ ---- -- --------- ----------- ---------- -- ----- -- 2 10.2.0.1 IKE-Gateway123 Init 16 PSK/ / / 5 2 INIT sent IKEv2 IPSec Child SAs Gateway Name TnID Tunnel ID Parent Role SPI(in) SPI(out) MsgID ST ------------ ---- ------ -- ------ ---- ------- -------- ----- -- IKE-Gateway123 2 IPSec-Tunnel123 8 16 Init 00000000 00000000 00000000 GetSPI done 00000000 00000000 00000000 GetSPI done Show IKEv2 SA: Total 1 gateways found. 1 ike sa found.   ... View more