Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

Issues Upgrading from 11.0.X to 11.1.X

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Issues Upgrading from 11.0.X to 11.1.X

L1 Bithead

Hello! I'm trying to upgrade my VM series firewalls from 11.0.4-h5, since it's going EOL soon, to 11.1.4-h4. Once I upgrade, auto-commit fails with the very generic:

Validation Error:
client routed phase 1 failure
Commit failed
Local configuration size: 12 KB
Predefined configuration size: 16 MB
Merged configuration size(local, panorama pushed, predefined): 20 MB

 I tried factory resetting the box then pushing again but I get the same error. I tried upgrading to 11.2.3 but I got the same error. It seems like something changed in the config format but I can't tell what. Any ideas?

2 accepted solutions

Accepted Solutions

Cyber Elite
Cyber Elite

the error is occurring in routed, so there's something up with your VR

 

if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:

 

> debug routing global on debug
> less mp-log routed.log
or 
> tail follow yes mp-log routed.log

 

let us know what you see

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

View solution in original post

That was exactly what I needed. Looks like I ran into a bug!

2024-11-06 06:15:09.715 -0800 Error:  pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.

 To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.

View solution in original post

2 REPLIES 2

Cyber Elite
Cyber Elite

the error is occurring in routed, so there's something up with your VR

 

if you can't find anything in the config file, you can follow the logs via CLI to try and figure out what's going on during a commit:

 

> debug routing global on debug
> less mp-log routed.log
or 
> tail follow yes mp-log routed.log

 

let us know what you see

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization

That was exactly what I needed. Looks like I ran into a bug!

2024-11-06 06:15:09.715 -0800 Error:  pan_routed_check_mgmt_address_conflict(pan_routed_parse.c:8367): In router main: Mgmt IPv6 GW fc00:0:0:2:0:0:0:1/128 is conflict with address fc00:0:0:2:0:0:0:1/64 on interface ethernet1/4.2.

 To get around it, I needed to delete the gateway address then switch the gateway from Static to Dynamic. If I left the gateway address in the box, even when I switched it to Dynamic, I still got the error.

  • 2 accepted solutions
  • 125 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!