Commit fails with Error "mprelay : phase1 : config push error (Module: device) Commit failed"
28752
Created On 07/24/19 07:20 AM - Last Modified 04/15/24 17:53 PM
Symptom
- Commit fails with Error "mprelay : phase1 : config push error (Module: device) Commit failed"
- This can happen when aggregate interfaces are configured.
- Mprelay log displays configured interface entries <value> exceeded fpga capacity <value> as shown below.
Mprelay log
2019-02-27 11:06:09.009 +0000 Error: pan_hawk_ifconfig_p1(src_5000/cp/pan_platform_hawk.c:2662): configured interface entries 16447 exceeded fpga capacity 16384
2019-02-27 11:06:09.010 +0000 Error: pan_hawk_netconfig_p1(src_5000/cp/pan_platform_hawk.c:2801): interface configuration phase 1 failed
2019-02-27 11:06:09.010 +0000 Hawk network configuration phase 1 returns -1
2019-02-27 11:06:09.010 +0000 Error: pan_mprelay_handle_phase1_cfg(src/pan_mprelay_cfg.c:1485): Fail to complete platform phase 1 config.
2019-02-27 11:06:09.010 +0000 Error: pan_mprelay_cfg_callback(src/pan_mprelay_cfg.c:252): pan_mprelay_handle_cfg_phase1() failed
2019-02-27 12:48:03.826 +0000 MPrelay: Cfgpush callback.
2019-02-27 12:48:03.826 +0000 phase1 abort
2019-02-27 12:48:03.903 +0000 MPrelay: Cfgpush callback.
Environment
- Any Palo Alto Networks hardware firewall.
- Aggregate Ethernet (AE) interfaces configured.
- Subinterfaces configured under aggregate ethernet interfaces.
Cause
- FPGA limit is calculated when AE subinterfaces are associated with Virtual routers. When the calculation exceeds the FPGA limit for the firewall, above error message is displayed
Resolution
Reduce the number of AE sub-interface or AE group to resolve the commit error.
Additional Information
System log indicating commit failures.
System.log
2019/03/01 09:44:53 high general general 0 Commit job failed for user admin
2019/03/01 09:44:53 info sslmgr sslmgr- 0 SSLMGR daemon configuration load phase-1 aborted.
2019/03/01 09:44:53 info satd satd-co 0 SATD daemon configuration load phase-1 aborted.
2019/03/01 09:44:53 info ras rasmgr- 0 RASMGR daemon configuration load phase-1 aborted.
2019/03/01 09:44:53 info routing routed- 0 Route daemon configuration load phase-1 aborted.
2019/03/01 09:44:53 info vpn ike-con 0 IKE daemon configuration load phase-1 aborted.
DevSrv log indicating similar failures
devsrvr.log
Warning: pan_cfg_sysd_parse_response_msg(pan_cfg_sysd.c:859): got error response from cfgpush.s1.comm.cfg: Error: mprelay : phase1 : config push error
mp devsrv.log 2019-03-01 09:44:53
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.091 +0000 debug: pan_config_push_phase1(pan_config_handler_sysd.c:2078): got error for phase1 push
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.091 +0000 Error: pan_config_handler_sysd(pan_config_handler_sysd.c:2283): pan_config_push_phase1() failed
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.091 +0000 Error: pan_ctrl_parse_config(pan_controller_proc.c:392): pan_config_handler_sysd() failed
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.096 +0000 debug: pan_url_category_reset_defaults(pan_url_category.c:318): Revert to original BrightCloud categories
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.096 +0000 debug: pan_url_category_reset_defaults(pan_url_category.c:323): Revert to original PAN categories
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.142 +0000 Error: pan_ctrl_config_phase1(pan_controller_proc.c:746): pan_ctrl_parse_config() failed
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.142 +0000 Config commit phase1 failed
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.148 +0000 debug: cfgagent_flags_callback(pan_cfgagent.c:226): device: cfg agent received flags from server
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.148 +0000 debug: cfgagent_flags_callback(pan_cfgagent.c:230): new flags=0x0
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.148 +0000 Config commit phase1 abort
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.148 +0000 kill SIGUSR1 to pid 0
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.148 +0000 debug: pan_config_abort_sysd(pan_config_handler_sysd.c:2346): no config phase 1 to be aborted
mp devsrv.log 2019-03-01 09:44:53 2019-03-01 09:44:53.149 +0000 Error: cfgagent_modify_callback(pan_cfgagent.c:84): Modify string (sw.mgmt.runtime.clients.device.err) error: USER (1)