Palo Alto Firewall /Panorama unreachable after PAN-OS upgrade

Palo Alto Firewall /Panorama unreachable after PAN-OS upgrade

1237
Created On 01/02/24 19:05 PM - Last Modified 07/28/25 18:10 PM


Symptom


Firewall will be inaccessible 
Managment IP shows unknown 
ip-address: unknown
public-ip-address: unknown
netmask: unknown
default-gateway: 172.18.219.1
ip-assignment: static
ipv6-address: unknown
Management(MGMT) IP failed to assign on the management interface of the firewall due to an invalid netmask (255.255.25.128).

sysdagent.log  
2023-12-19 01:44:25.099 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:44:25.003 +0000 NET: CFGIF Attempting interface: eth0 ({'disable-dhcp': True, 'fips-gated': True,
'ip-type': 'static', 'ipaddr': '172.18.219.88', 'ipv6addr': '', 'mtu': '1500', 'netmask': '255.255.25.128', 'onboot': True,
'routes': {'default': '172.18.219.1'}, 'up': True, 'v6routes': {'default': ''}})
2023-12-19 01:25:37.802 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:25:43.110 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:26:23.592 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:28:39.094 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:33:59.596 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 01:44:25.099 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 02:02:25.598 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 02:31:01.093 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 03:13:41.587 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0
2023-12-19 04:14:27.097 +0000 NET: CFGIF Unable to calculate ipaddr/netmask/prefix 172.18.219.88 for eth0

 

Environment


  • PANOS-10.2,x
  • Any Firewall
  • Panorama 

Cause


  • Management(MGMT) IP failed to assign on the management interface of Firewall, VM Panorama  due to invalid netmask.
  • Ipcalc Linux utility got changed due to kernel upgrade in Pan-OS resulting in IP calculation issue due to invalid netmask resulting in Management(MGMT) interface failed to come up.

Resolution


Management IP update.
Other users also viewed:
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000XhP3CAK&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language