Panorama commit fails with error "Failed to autogenerate SDWAN configuration"

Panorama commit fails with error "Failed to autogenerate SDWAN configuration"

4863
Created On 03/29/25 12:12 PM - Last Modified 04/16/25 01:09 AM


Symptom


Panorama commit or push to the firewall fails with the below error message:

  • Panorama:

Details
sd_wan plugin config generated. Validations running...
Validation Error:
plugins -> sd_wan -> devices -> fw-serial-no -> zones unexpected here
plugins -> sd_wan -> devices is invalid

  • >less mp-log configd.log:

2025-02-25 14:54:28.651000+08:00 going to generate ipsec for l: ethernet1/1 and p: ethernet1/1
2025-02-25 14:54:28.651000+08:00 Failed to auto generate SD-wan config: 2025-02-25 14:54:28.651000+08:00 'AddressObject1' does not appear to be an IPv4 or IPv6 interface

  • Firewall:

Internal error during commit processing. Commit/Validate failed.
Invalid configuration.
Failed to autogenerate SDWAN configuration.



Environment


  • Panorama 11.1.x
  • SDWAN plugin 3.2.0 and later


Cause


  • As documented here, from SDWAN-plugin version 3.2.0 and later, you can only add an IPv4 address or a defined variable and not an address object for the IP field of SDWAN enabled interfaces. 

For eg, in the below snippet configuration from Panorama, where the address object called "AddressObject1" is used instead of IPv4 address or a defined variable.

set template "Template1" config network interface ethernet ethernet1/1 layer3 ip AddressObject1 sdwan-gateway 1.1.1.1 



Resolution


  • Under each template [Under Templates  -> Select the appropriate Template -> Network -> Interfaces] , check the SDWAN enabled interface configuration and replace all the address objects with IPv4 addresses.


Additional Information


https://docs.paloaltonetworks.com/sd-wan/administration/configure-interfaces-for-sd-wan/configure-ethernet-interface-for-sd-wan

https://docs.paloaltonetworks.com/sd-wan/activation-and-onboarding/system-requirements-for-sd-wan



Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HFHrCAO&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail