How to Resolve a Commit failure error on Panorama "panorama-server unexpected here / system is invalid" for configuration change from to HA firewalls (Active/Passive).
28730
Created On 11/11/21 21:28 PM - Last Modified 02/16/22 15:48 PM
Objective
- Palo 3200 in HA mode and once try to commit the configuration commit from Panorama, getting the following error:
- Validation Error:
- deviceconfig -> system -> panorama-server unexpected here
- deviceconfig -> system is invalid
- Commit failed
Environment
- PAN-OS
- PA-3200
Procedure
1. From peer Firewall that it does not present the issue. SAVE a configuration snapshot under DEVICE > SETUP > OPERATIONS > SAVE > SAVE NAME CONFIGURATION SNAPSHOT
2. EXPORT configurations under DEVICE > SETUP > OPERATIONS > EXPORT > EXPORT NAME CONFIGURATION SNAPSHOT
3. From Firewall with commit error. Make sure document HOSTNAME, MANAGEMENT IP ADDRESS, AND HIGH AVAILABILITY CONFIGURATIONS, since you will be adding again later in this process
4. IMPORT configurations snapshot into Firewall with commit error under under DEVICE > SETUP > OPERATIONS > IMPORT > IMPORT NAME CONFIGURATION SNAPSHOT
5. LOAD configurations snapshot into Firewall with commit error under under DEVICE > SETUP > OPERATIONS > LOAD > LOAD NAME CONFIGURATION SNAPSHOT
6. CHANGE the correct hostname, MANAGEMENT IP ADDRESS , AND HIGH AVAILABILITY CONFIGURATIONS of the Firewall with commit error.
7. Commit