Commit And Push failed from Panorama to Prisma Access with messsage "Local configured IPv6 list is out of sync with cloud configured IPv6 list!" for multi-tenant.
4392
Created On 08/27/24 03:01 AM - Last Modified 03/21/25 02:26 AM
Symptom
- Commit And Push from Panorama to Prisma Access fails with the following error.
Local configured IPv6 list is out of sync with cloud configured IPv6 list!
Please execute 'request plugins cloud_services prisma-access get-ip-allowlist-addresses' command to complete the configuration.
Failed plugin validation
- CLI command 'request plugins cloud_services prisma-access get-ip-allowlist-addresses' fails.
admin@Panorama> request plugins cloud_services prisma-access get-ip-allowlist-addresses service-type gpaas
Invalid query - Multi-tenant is enabled, please provide a sub-tenant name
Environment
- Panorama managed Prisma Access
- Commit
- Multi-tenant.
Cause
When multi-tenant is enabled, specify the name of the sub-tenant.
Resolution
If you set Multi-tenant setting for Prisma Access, please follow Steps as below:
- Navigate to Panorama > Cloud Services > Configuration > Mobile Users - GlobalProtect tab and hit refresh on the top right of the page.
- Run the command "request plugins cloud_services prisma-access multi-tenant get-ip-allowlist-addresses service-type gpaas tenant-name <mention the name of the tenant>"
- For details on Multi-Tenant, refer to the documentation.