Palo Alto Networks Knowledgebase: Schema Verification Fails for a Sub-Interface on Commit

Schema Verification Fails for a Sub-Interface on Commit

4147
Created On 02/08/19 00:06 AM - Last Updated 02/08/19 00:06 AM
Resolution

Issue

Schema verification fails for a sub-interface when a commit is attempted.

The following is an example of error message:

Details: Invalid configuration. Schema verification failed.

zone -> FoodPOSwifi -> network -> layer3 'ethernet1/7.140' is not a valid reference

This operation invalidates configuration for devices -> localhost.localdomain -> vsys -> vsys1 -> zone -> FoodPOSwifi

Resolution

  1. Remove the interface and corresponding zone from the configuration
  2. Issue a 'commit force' operation from the CLI, as follows:
    > configure
    # commit force
  3. Create a zone and assign to L2/L3 depending on the configuration requirements.
    For the scenario that produced the example error message above, the zone and interface type would be 'FoodPOSwifi' and Layer3, respectively.
  4. Issue a 'commit force' (as described in step 2 above)
  5. Add sub-interface to the existing physical interface and assign the zone created above.
    For the example above, this would be the '1/7.140' sub-interface
  6. Issue a 'commit force' (as described in step 2 above)

owner: kadak



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClL7CAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language