This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to add an Interface alias on WAN with Tunnel Interfaces

Hello Community,

I have a WAN interface on which IPSec tunnel interfaces (xfrm) are configured. When I want to add another alias on the interface, I only get this message very briefly:

On the WAN interface an alias is configured, I can adjust this existing alias on the WAN interface.On the LAN interface I can add more aliases.

I think this is a bug in the firmware 18-MR5.

Thanks,

Ben



This thread was automatically locked due to age.
  • FormerMember
    0 FormerMember

    Hi Ben@Network,

    Thanks for reaching out to the Community! 

    What is the firewall model number? 

    I've tried to replicate this in my LAB, but it works for me. The firmware on my firewall is v18 MR5 Build#574.

    Reference screenshot: 

    Thanks,

  • It is an SG550 with v18 MR5 Build 574 and it was yesterday rebooted. 

    If a post solves your question please use the 'Verify Answer' button.

  • Did you rename the Interfaces on XG? The interfaces are called ethX correct? Because in my systems, i do not have any problems to add this. 

    __________________________________________________________________________________________________________________

  • I renamed the interface on the SG550 (SFOS 18.0.5 MR-5-Build586) back to "PortA1" and tried to create an alias, again I did not succeed. When I try to do this via API call I get this error message:

    501 - Configuration parameters validation failed. --> /Alias/Name

    The last thing I tried was XML import. The import does not generate an error message, but no alias is created.

    On another firewall XG125 with the same condition WAN and xfrm interfaces renamed I could create an alias.

    If a post solves your question please use the 'Verify Answer' button.

  • You should check the applog.log and csc.log while adding this alias. 

    __________________________________________________________________________________________________________________

  • In the csc.log I see this error message:

    MESSAGE Apr 30 11:27:22 [worker:12482]: {"request":{"method":"opcode","name":"apiInterface","version":"1.6","type":"json","length":321,"data":{ "hosttype": "1", "currentlyloggedinuserip": "zzz.zzz.zzz.183", "___component": "GUI", "APIVersion": "1500.1", "netmask": "255.255.255.255", "csviplist": "", "iprangehigh": "", "hostname": "#PortA1:1", "netid": "xxx.xxx.xxx.28", "iprangelow": "", "hostgroupid": "", "___caller": "system", "___username": "admin", "mode": 51 }}}
    MESSAGE Apr 30 11:27:23 [worker:12460]: {"request":{"method":"opcode","name":"add_host","version":"1.6","type":"json","length":371,"data":{ "netmask": "255.255.255.255", "hostname": "#PortA1:1", "___component": "GUI", "ipfamily": "0", "Entity": "iphost", "mode": 51, "hostgroupid": "", "currentlyloggedinuserip": "zzz.zzz.zzz.183", "APIVersion": "1500.1", "___caller": "system", "netid": "xxx.xxx.xxx.28", "___username": "admin", "currentlyloggedinuserid": 3, "hosttype": "1", "Event": "ADD", "updatehostgrp": "" }}}
    ERROR Apr 30 11:27:23 [add_host:12460]: get_query_status: DB has returned error code: 23505
    ERROR Apr 30 11:27:23 [add_host:12460]: get_query_status:Query Error: ERROR: duplicate key value violates unique constraint "tblhost_hostname_key"
    DETAIL: Key (hostname)=(#PortA1:1) already exists.
    CRITICAL Apr 30 11:27:23 [add_host:12460]: csc_prep_query: execute_prepare_query failed for Execute Query.
    ERROR Apr 30 11:27:23 [add_host:12460]: do_prep_query: Failed PREPSTMT: 'insert into tblhost (hostid, hostname, netid, netmask, hosttype,ipfamily) values(DEFAULT,?,?,?,?,?) returning hostid'

    On the WebAdmin and via API call I see only one Alias "PortA1:0". It looks like that something in in the database wrong. How can I fix it?

    If a post solves your question please use the 'Verify Answer' button.

  • Thats a taff one. You should not mess in the database and open a support Case. If you make a mistake in the config database, the entire config could get corrupted. 

    Please open a Support Case and reflect those issues and observation. Ping the Case ID, so he can track this. 

    __________________________________________________________________________________________________________________

  • If I do a factory reset and import the configuration backup, do I get a fresh database, like on the UTM?

    If a post solves your question please use the 'Verify Answer' button.

  • Basically it should remove this faulty database, if it can do it. More likely a reimage will resolve you issue 100%. 

    __________________________________________________________________________________________________________________

  • Reimaging the firewall does not solve the problem. On PortA1 I can only create one alias. When I move my WAN Interface to another interface I can create more than one alias.

    Next I can try to build the configuration from the scratch.

    If a post solves your question please use the 'Verify Answer' button.