Issues Upgrading from 11.0.X to 11.1.X

[MeCJay12]

Hello! I'm trying to upgrade my VM series firewalls from 11.0.4-h5, since it's going EOL soon, to 11.1.4-h4. Once I upgrade, auto-commit fails with the very generic:

Validation Error:
client routed phase 1 failure
Commit failed
Local configuration size: 12 KB
Predefined configuration size: 16 MB
Merged configuration size(local, panorama pushed, predefined): 20 MB

 I tried factory resetting the box then pushing again but I get the same error. I tried upgrading to 11.2.3 but I got the same error. It seems like something changed in the config format but I can't tell what. Any ideas?

[reaper · Accepted solution]

the error is occurring in routed, so there's something up with your VR

if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:

> debug routing global on debug
> less mp-log routed.log
or 
> tail follow yes mp-log routed.log

let us know what you see

[MeCJay12 · Accepted solution]

That was exactly what I needed. Looks like I ran into a bug!

2024-11-06 06:15:09.715 -0800 Error:  pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.

 To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.