Error: Missing ip-netmask, ip-range or fqdn attribute

Error: Missing ip-netmask, ip-range or fqdn attribute

34923
Created On 09/26/18 13:53 PM - Last Modified 06/16/23 09:58 AM


Resolution


Issue

When committing a change on the firewall or through Panorama, the following error is encountered:

VSYS1

Error: Missing ip-netmask, ip-range or fqdn attribute

(Module: device)

Commit failed

 

Resolution

The error is caused by an incomplete address object.

  • Browse to the firewall or Panorama Object tab, and click Addresses.
  • Scan through the list and check for any entries that do not have either a Type or Address field.
  • Correct or delete those invalid objects and commit again.
 

Detailed logs can be seen in devsrv.log:
PA-5220> tail follow yes mp-log devsrv.log
2022-06-06 16:03:05.558 +1000 Error: pan_address_from_obj(pan_config_parser.c:2271): pan_address_address_from_obj('host_1.2.3.4') failed  <-----
2022-06-06 16:03:05.558 +1000 Error: pan_addresses_from_obj(pan_config_parser.c:2577): pan_address_from_obj ('host_1.2.3.4') failed  <-----
2022-06-06 16:03:05.558 +1000 Error: pan_vsys_from_obj(pan_config_parser.c:23963): pan_addresses_from_obj failed
2022-06-06 16:03:05.581 +1000 Error: pan_config_from_obj(pan_config_parser.c:25524): pan_vsyses_from_obj failed
2022-06-06 16:03:05.637 +1000 Error: pan_ctrl_save_config(pan_config_handler_sysd.c:2085): Error compiling config
<<vsys1 (vsys1)>>
Error: Missing ip-netmask, ip-range, fqdn or dynamic attribute
<</vsys1 (vsys1)>>

 

owner: gwesson



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClwuCAC&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language