Recovering additional management interfaces configuration when loading a backup configuration on a new Panorama. (VM or M series)
0
Created On 01/06/20 12:57 PM - Last Modified 07/19/22 23:15 PM
Symptom
When loading a backup configuration of your Panorama on a new VM instance or M-series, additional management interfaces settings (eth1, eth2 ..) will not be included.
Only the default management interface configuration will be applied correctly.
Environment
- Any Panorama.
- PAN-OS 8.1 and above
Cause
The additional management interfaces configuration is part of log collector portion.
This part of the configuration is bound to serial number of the log collector, even if log collector is on the local Panorama.
When loading a backup configuration from an other Panorama, the serial number of the log collector is not matching with the local Panorama anymore.
Additional interfaces configuration is not taken into account.
Resolution
Edit the XML configuration file manually to change the serial number in log-collector and log-collector-group section before importing the config to new Panorama.
<log-collector>
<entry name="007307001665"> Change this value with S/N of the new Panorama.
<deviceconfig>
<system>
<eth1>
<ip-address>10.1.1.2</ip-address>
<netmask>255.255.255.0</netmask>
<default-gateway>10.1.1.1</default-gateway>
<type>
<static/>
</type>
</eth1>
</system>
</deviceconfig>
</entry>
</log-collector>
<log-collector-group>
<entry name="default">
<logfwd-setting>
<collectors>
<member>
007307001665 Change this value with S/N of the new Panorama.
</member>
</collectors>
</logfwd-setting>
</entry>
</log-collector-group>