Error: Missing ip-netmask, ip-range or fqdn attribute
34923
Created On 09/26/18 13:53 PM - Last Modified 06/16/23 09:58 AM
Resolution
Issue
When committing a change on the firewall or through Panorama, the following error is encountered:
VSYS1
Error: Missing ip-netmask, ip-range or fqdn attribute
(Module: device)
Commit failed
Resolution
The error is caused by an incomplete address object.
- Browse to the firewall or Panorama Object tab, and click Addresses.
- Scan through the list and check for any entries that do not have either a Type or Address field.
- Correct or delete those invalid objects and commit again.
Detailed logs can be seen in devsrv.log:
PA-5220> tail follow yes mp-log devsrv.log
2022-06-06 16:03:05.558 +1000 Error: pan_address_from_obj(pan_config_parser.c:2271): pan_address_address_from_obj('host_1.2.3.4') failed <-----
2022-06-06 16:03:05.558 +1000 Error: pan_addresses_from_obj(pan_config_parser.c:2577): pan_address_from_obj ('host_1.2.3.4') failed <-----
2022-06-06 16:03:05.558 +1000 Error: pan_vsys_from_obj(pan_config_parser.c:23963): pan_addresses_from_obj failed
2022-06-06 16:03:05.581 +1000 Error: pan_config_from_obj(pan_config_parser.c:25524): pan_vsyses_from_obj failed
2022-06-06 16:03:05.637 +1000 Error: pan_ctrl_save_config(pan_config_handler_sysd.c:2085): Error compiling config
<<vsys1 (vsys1)>>
Error: Missing ip-netmask, ip-range, fqdn or dynamic attribute
<</vsys1 (vsys1)>>
owner: gwesson