Panorama禁用设备遥测时,由于"区域无效"错误,提交失败。
40667
Created On 08/05/21 00:50 AM - Last Modified 02/01/23 09:08 AM
Symptom
当管理员禁用设备遥测时,提交未出现以下验证错误。
以下是在 Panorama 托管的 PrismaAcces 上提交失败时出现错误的例子。
Validation Error: devices -> localhost.localdomain -> template-stack -> Service_Conn_Template_Stack -> config -> devices -> localhost.localdomain -> deviceconfig -> system -> device-telemetry -> region is invalid devices -> localhost.localdomain -> template-stack -> Explicit_Proxy_Template_Stack -> config -> devices -> localhost.localdomain -> deviceconfig -> system -> device-telemetry -> region is invalid devices -> localhost.localdomain -> template-stack -> Mobile_User_Template_Stack -> config -> devices -> localhost.localdomain -> deviceconfig -> system -> device-telemetry -> region is invalid devices -> localhost.localdomain -> template-stack -> Remote_Network_Template_Stack -> config -> devices -> localhost.localdomain -> deviceconfig -> system -> device-telemetry -> region is invalid
Cause
如果 firewall 配置中的模式无效,则会导致错误。
在这种坐席上,这种错误会出现在知己.log。
======= configd.log ======= 2021-07-30 15:43:20.284 +0900 Error: _pan_schema_verify_node(pan_schema_obj.c:7195): is invalid , node: region near line 7452 2021-07-30 15:43:20.291 +0900 Error: _pan_schema_verify_node(pan_schema_obj.c:7195): is invalid , node: region near line 7427 2021-07-30 15:43:20.296 +0900 Error: _pan_schema_verify_node(pan_schema_obj.c:7195): is invalid , node: region near line 7402 2021-07-30 15:43:20.347 +0900 Error: pan_cfg_verify_ex(pan_cfg_commit_handler.c:2723): invalid configuration. Schema verification failed. <<<---!!!
Resolution
根据以下命令选择区域,并提交一次。 此操作将更正该模式。
> configure # set template-stack <Template Stack name> config devices localhost.localdomain deviceconfig system device-telemetry region <region name> # commit
之后,您可以选择"无"作为设备遥测区域。 在 CLI 上,您可以通过此命令删除区域。
# delete template-stack <Template Stack name> config devices localhost.localdomain deviceconfig system device-telemetry region <region name> # commit