New Logging disk added in Panorama VM is Unavailable and Admin disabled

New Logging disk added in Panorama VM is Unavailable and Admin disabled

50282
Created On 05/10/19 00:38 AM - Last Modified 11/02/19 02:55 AM


Symptom


  • Affects adding a 2TB log disk while Panorama is in Legacy mode
  • After adding disk and rebooting VM, Status: Unavailable and Reason: Admin disabled message is displayed.
admin@Panorama> show system disk details

Name : sdb
State : Present
Size : 2048000 MB
Status : Unavailable
Reason : Admin disabled


Environment


Panorama-VM in Legacy Mode running PAN-OS 8.1.7.

Cause


admin@Panorama> show system state | match cfg.cms
cfg.cms.reserve: True

When cfg.cms.reserve is set to True, all new disks added will be reserved for switching to Panorama mode and made unavailable in legacy mode.


Resolution


  1. If cfg.cms.reserve is set to 'True' then perform the following commands in the Panorama CLI:
  • debug panorama-vld-mgr reset-logging-disk
The above action will change the cfg.cms.reserve flag from True to False, which will allow the Panorama to use the sdb disk while in Legacy mode.
  1. The second action is to reboot to apply the above change by using the command below.
  • request restart system
Note: When rebooting, the sdb disk is detected. There is a Linux make filesystem command that is run to create sdb1 partition. This may take time based on the size of the filesystem. Possibly this could take an hour or more if the filesystem is very large. The authd process doesn't start up until after these operations complete, so logging into the Panorama is unavailable.


Additional Information


  • The logs "Very big device: Trying to use READ CAPACITY(16)" and "cache data unavailable" are normal and don't indicate an error.
  • No logs should be affected. Upon executing the debug command and reboot, the new disk will be formatted and available for logging.
  • Commit is not needed.


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/kcSArticleDetail?id=kA10g000000PLwx&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FkcSArticleDetail