This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to add an Interface alias on WAN with Tunnel Interfaces

Hello Community,

I have a WAN interface on which IPSec tunnel interfaces (xfrm) are configured. When I want to add another alias on the interface, I only get this message very briefly:

On the WAN interface an alias is configured, I can adjust this existing alias on the WAN interface.On the LAN interface I can add more aliases.

I think this is a bug in the firmware 18-MR5.

Thanks,

Ben



This thread was automatically locked due to age.
Parents
  • Did you rename the Interfaces on XG? The interfaces are called ethX correct? Because in my systems, i do not have any problems to add this. 

    __________________________________________________________________________________________________________________

  • I renamed the interface on the SG550 (SFOS 18.0.5 MR-5-Build586) back to "PortA1" and tried to create an alias, again I did not succeed. When I try to do this via API call I get this error message:

    501 - Configuration parameters validation failed. --> /Alias/Name

    The last thing I tried was XML import. The import does not generate an error message, but no alias is created.

    On another firewall XG125 with the same condition WAN and xfrm interfaces renamed I could create an alias.

    If a post solves your question please use the 'Verify Answer' button.

  • You should check the applog.log and csc.log while adding this alias. 

    __________________________________________________________________________________________________________________

  • In the csc.log I see this error message:

    MESSAGE Apr 30 11:27:22 [worker:12482]: {"request":{"method":"opcode","name":"apiInterface","version":"1.6","type":"json","length":321,"data":{ "hosttype": "1", "currentlyloggedinuserip": "zzz.zzz.zzz.183", "___component": "GUI", "APIVersion": "1500.1", "netmask": "255.255.255.255", "csviplist": "", "iprangehigh": "", "hostname": "#PortA1:1", "netid": "xxx.xxx.xxx.28", "iprangelow": "", "hostgroupid": "", "___caller": "system", "___username": "admin", "mode": 51 }}}
    MESSAGE Apr 30 11:27:23 [worker:12460]: {"request":{"method":"opcode","name":"add_host","version":"1.6","type":"json","length":371,"data":{ "netmask": "255.255.255.255", "hostname": "#PortA1:1", "___component": "GUI", "ipfamily": "0", "Entity": "iphost", "mode": 51, "hostgroupid": "", "currentlyloggedinuserip": "zzz.zzz.zzz.183", "APIVersion": "1500.1", "___caller": "system", "netid": "xxx.xxx.xxx.28", "___username": "admin", "currentlyloggedinuserid": 3, "hosttype": "1", "Event": "ADD", "updatehostgrp": "" }}}
    ERROR Apr 30 11:27:23 [add_host:12460]: get_query_status: DB has returned error code: 23505
    ERROR Apr 30 11:27:23 [add_host:12460]: get_query_status:Query Error: ERROR: duplicate key value violates unique constraint "tblhost_hostname_key"
    DETAIL: Key (hostname)=(#PortA1:1) already exists.
    CRITICAL Apr 30 11:27:23 [add_host:12460]: csc_prep_query: execute_prepare_query failed for Execute Query.
    ERROR Apr 30 11:27:23 [add_host:12460]: do_prep_query: Failed PREPSTMT: 'insert into tblhost (hostid, hostname, netid, netmask, hosttype,ipfamily) values(DEFAULT,?,?,?,?,?) returning hostid'

    On the WebAdmin and via API call I see only one Alias "PortA1:0". It looks like that something in in the database wrong. How can I fix it?

    If a post solves your question please use the 'Verify Answer' button.

  • Thats a taff one. You should not mess in the database and open a support Case. If you make a mistake in the config database, the entire config could get corrupted. 

    Please open a Support Case and reflect those issues and observation. Ping the Case ID, so he can track this. 

    __________________________________________________________________________________________________________________

  • If I do a factory reset and import the configuration backup, do I get a fresh database, like on the UTM?

    If a post solves your question please use the 'Verify Answer' button.

  • Basically it should remove this faulty database, if it can do it. More likely a reimage will resolve you issue 100%. 

    __________________________________________________________________________________________________________________

  • Reimaging the firewall does not solve the problem. On PortA1 I can only create one alias. When I move my WAN Interface to another interface I can create more than one alias.

    Next I can try to build the configuration from the scratch.

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • Reimaging the firewall does not solve the problem. On PortA1 I can only create one alias. When I move my WAN Interface to another interface I can create more than one alias.

    Next I can try to build the configuration from the scratch.

    If a post solves your question please use the 'Verify Answer' button.

Children