Commit fails with error "Failed to autogenerate SDWAN configuration"

Commit fails with error "Failed to autogenerate SDWAN configuration"

13855
Created On 03/24/22 03:25 AM - Last Modified 08/04/22 02:54 AM


Symptom


  • Panorama push to firewall fails with commit error  "Failed to autogenerate SDWAN configuration"
  • configd.log (less mp-log configd.log) on the firewall shows the following error
    Firewall> less mp-log configd.log
    ......
    Error:  pan_cfg_transform_fullpath(pan_cfg_utils.c:6828): error generating transform /opt/pancfg/mgmt/factory/tplrenamemapfrompushreq.xsl
    Error:  pan_cfg_tpl_renamemap_from_request(pan_cfg_templates.c:4986): failed to generate tpl rename map from request 
    Error:  pan_cfg_pushtpl_autogen_config_merge(pan_cfg_templates.c:6810): Zones node or zone map hash not found for sd-wan zone mapping
      File "/opt/pancfg/mgmt/transforms/cluster-gen.py", line 1529, in 
        if xml_to_file(gen_auto_config(root, tpl_config), xml_outfile, True) < 0:
      File "/opt/pancfg/mgmt/transforms/cluster-gen.py", line 1343, in gen_auto_config
        dn_node.gen_loopback_interface(loopback_name, local_info.bgp_info.loopback_address, config_node, vr_node.vr_interface_node)
      File "/opt/pancfg/mgmt/transforms/cluster-gen.py", line 816, in gen_loopback_interface
        xml_add_child(xml_get_node_by_xpath(config_node.zone_node[2], "./network/layer3"), loopback_member)
      File "/opt/pancfg/mgmt/transforms/cluster-gen.py", line 153, in xml_add_child
        root.append(node)
    Error:  pan_cfg_pushtpl_autogen_config_merge(pan_cfg_templates.c:6856): Failed to auto generate SD-wan config:
    'NoneType' object has no attribute 'append'
    ***Traceback***
    Failed to execute cluster-gen.py
    ....


Environment


  • Panorama with Managed Firewalls
  • Supported PAN-OS
  • SD-WAN plugin


Cause


The zones used for SD-WAN Plugin need to be layer3 zone.

Resolution


  1. Change the zone type to Layer3 (GUI: Network > Zones > (Select the zone) > (Use dropdown button to make it Layer3)
  2. Click  OK and commit the configuration
Change the zone type to Layer3
 
Note: Select the right template on which the actual firewall resides.


Additional Information




Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000004NkpCAE&lang=en_US%E2%80%A9&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language