- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
11-04-2024 05:53 AM
Hello! I'm trying to upgrade my VM series firewalls from 11.0.4-h5, since it's going EOL soon, to 11.1.4-h4. Once I upgrade, auto-commit fails with the very generic:
Validation Error:
client routed phase 1 failure
Commit failed
Local configuration size: 12 KB
Predefined configuration size: 16 MB
Merged configuration size(local, panorama pushed, predefined): 20 MB
I tried factory resetting the box then pushing again but I get the same error. I tried upgrading to 11.2.3 but I got the same error. It seems like something changed in the config format but I can't tell what. Any ideas?
11-06-2024 06:07 AM
the error is occurring in routed, so there's something up with your VR
if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:
> debug routing global on debug
> less mp-log routed.log
or
> tail follow yes mp-log routed.log
let us know what you see
11-06-2024 06:47 AM
That was exactly what I needed. Looks like I ran into a bug!
2024-11-06 06:15:09.715 -0800 Error: pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.
To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.
11-06-2024 06:07 AM
the error is occurring in routed, so there's something up with your VR
if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:
> debug routing global on debug
> less mp-log routed.log
or
> tail follow yes mp-log routed.log
let us know what you see
11-06-2024 06:47 AM
That was exactly what I needed. Looks like I ran into a bug!
2024-11-06 06:15:09.715 -0800 Error: pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.
To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!