PA VM showing deactivated when it is registered

PA VM showing deactivated when it is registered

9922
Created On 03/27/19 22:12 PM - Last Modified 12/31/19 19:21 PM


Symptom


Newly spun-up PA-VM has a Serial Number generated and it also has license activated on it.

Panorama-managed VM under
Panorama > Managed Devices > Summary > Device State shows as deactivated when checked for the management IP of this new PA-VM. This also shows a different Serial Number listed.



   


Environment


Panorama can be M-100/M-500/VM-Panorama.

Managed PA-VM can be any PA-VM such as VM-100, VM-300 etc. 

 


Cause


Newly created PA-VM and the Old VM has the same management IP in Panorama with status showing deactivated.

Old PA-VM was deactivated but not deleted under Panorama > Managed Devices > Summary.

Searching for management IP in Panorama GUI you will find multiple entries.

Admin/User might search for the management IP and might consider this PA-VM listed is the new one. Make sure you look for the serial number of the newly added VM and not the management IP address.
 


Resolution


There are 2 solutions for this issue. Either can be followed to achieve the goal of replacing deactivated VM with newly created VM.

1) Under Panorama > Managed Devices > Summary, Deactivated old PA-VM needs to be deleted. Add the serial number of the new PA-VM.

2) In CLI of Panorama use this command: 
 
  1. > replace device old <old SN#> new <new SN#>
Go into configuration mode and commit the changes.
> configure
# commit                                                                                                 

Please refer to the below article for 2nd solution:
How to Replace a Managed Device with a New Device on Panorama from the CLI


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000boT8CAI&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language