GP stellt keine Verbindung her, wenn in der Gateway-Liste die Option "Best Available" ausgewählt wird.

GP stellt keine Verbindung her, wenn in der Gateway-Liste die Option "Best Available" ausgewählt wird.

18418
Created On 07/06/21 04:24 AM - Last Modified 05/17/23 03:28 AM


Symptom


- GP Die Verbindung wurde erfolgreich hergestellt, wenn Sie ein externes Gateway aus der Liste auswählen.
- Es wird jedoch GP keine Verbindung hergestellt, wenn Sie unter Gateway "Best Available" auswählen, wie unten gezeigt.

       Das Beste auf dem MarktGP Es wird keine Verbindung zu Best Available hergestellt


PanGPS.log:
(T316)Debug(8316): 07/06/21 04:06:20:834 ----Portal Login starts----
...

(T316)Debug( 814): 07/06/21 04:06:21:006 REGION-PRIO, gateway 0(Gateway-1), 0, region = Any, priority = 0, portalRegion=192.168.0.0-192.168.255.255
(T316)Debug( 413): 07/06/21 04:06:21:006 REGION-PRIO, regioncode=192.168.0.0-192.168.255.255, return priority 0, bManual=1
(T316)Debug( 814): 07/06/21 04:06:21:006 REGION-PRIO, gateway 1(Gateway-2), 0, region = Any, priority = 0, portalRegion=192.168.0.0-192.168.255.255
(T316)Debug( 413): 07/06/21 04:06:21:006 REGION-PRIO, regioncode=192.168.0.0-192.168.255.255, return priority 0, bManual=1
(T316)Debug( 814): 07/06/21 04:06:21:006 REGION-PRIO, gateway 2(Gateway-3), 0, region = Any, priority = 0, portalRegion=192.168.0.0-192.168.255.255
(T316)Debug( 413): 07/06/21 04:06:21:006 REGION-PRIO, regioncode=192.168.0.0-192.168.255.255, return priority 0, bManual=1
(T316)Debug( 814): 07/06/21 04:06:21:006 REGION-PRIO, gateway 3(Gateway-4), 0, region = Any, priority = 0, portalRegion=192.168.0.0-192.168.255.255
(T316)Debug( 413): 07/06/21 04:06:21:006 REGION-PRIO, regioncode=192.168.0.0-192.168.255.255, return priority 0, bManual=1


(P116-T2276)Debug(6895): 07/06/21 04:52:16:731 --Set state to Discovering network...
(P116-T8484)Debug(5321): 07/06/21 04:52:16:731 CaptivePortalDetectionThread: IsDetectingCaptivePortal=1, PreLoginIsDone=0
(P116-T8484)Debug(5298): 07/06/21 04:52:16:731 CaptivePortalDetectionThread: wait (2000 ms) for captive portal detection event.
(P116-T2276)Debug(5647): 07/06/21 04:52:16:731 Logout gateways before network discover..., bJustResumed=0
(P116-T2276)Debug(1390): 07/06/21 04:52:16:731 Logging out gateway, reason is Network discover
(P116-T2276)Debug(1429): 07/06/21 04:52:16:731 Logging out gateway over
(P116-T2276)Debug( 330): 07/06/21 04:52:16:731 Parse gateway list for user gpuser
(P116-T2276)Debug(12930): 07/06/21 04:52:16:731 RetrieveClientIpByRemoteHost() - invalid remote host: .
(P116-T2276)Debug( 196): 07/06/21 04:52:16:731 SelectInternalGateways - failed to retrieve client source ipv6!
(P116-T2276)Debug(5473): 07/06/21 04:52:16:731 Gateway 192.168.168.61(test): ipv4 192.168.168.61, ipv6 , FQDN no
(P116-T2276)Debug( 350): 07/06/21 04:52:16:731 All external gateways are manual only                        <<<<<<<<<<<<<
(P116-T2276)Debug(5670): 07/06/21 04:52:16:731 Set network discover in progress
(P116-T2276)Debug(4215): 07/06/21 04:52:16:731 UpdatePrelogonStateForSSO() - tunnel state = Connecting
(P116-T2276)Debug(5737): 07/06/21 04:52:16:731 NetworkDiscoverThread: network type is external.
(P116-T2276)Debug(5810): 07/06/21 04:52:16:731 NetworkDiscoverThread: Discover external network.
(P116-T2276)Debug(5835): 07/06/21 04:52:16:731 On-demand mode, all external gateways are manual only        <<<<<<<<<<<<<
(P116-T2276)Debug(6895): 07/06/21 04:52:16:731 --Set state to Disconnected
(P116-T3340)Debug(2427): 07/06/21 04:52:16:731 Setting debug level to 5
(P116-T2276)Debug(5939): 07/06/21 04:52:16:747 NetworkDiscoverThread: PortalStatus is 1, HasLoggedOnGateway is 0
(P116-T2276)Debug(5962): 07/06/21 04:52:16:747 Network discovery is not ready, set GP VPN status as disconnected
(P116-T2276)Debug(11228): 07/06/21 04:52:16:747 SetVpnStatus called with new status=0, Previous Status=0
(P116-T2276)Debug(4215): 07/06/21 04:52:16:747 UpdatePrelogonStateForSSO() - tunnel state = Disconnected
(P116-T2276)Debug(5976): 07/06/21 04:52:16:747 All external gateways are manual only.                        <<<<<<<<<<<<<
(P116-T2276)Debug(6895): 07/06/21 04:52:16:747 --Set state to Discovery complete

 


Environment


In der Regel tritt dieses Problem in allen und GP in der PAN OS Client-Version auf.

Cause


Dies geschieht, wenn alle externen Gateways mit der Priorität "Nur manuell" konfiguriert sind, wie unten gezeigt:
Liste der externen Gateways


Resolution


Konfigurieren Sie mindestens 1 externes Gateway mit der Priorität "Höchste/Hoche/Mittel/Niedrigste/Niedrigste".

Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oMHTCA2&lang=de&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language