Alle gelaufenen Jobs anzeigen:
admin@PA1(active-primary)> show jobs Enqueued ID Type Status Result Completed -------------------------------------------------------------------------- 2014/08/12 16:01:53 148 FqdnRefresh ACT PEND 60% 2014/08/12 16:01:39 147 Commit FIN OK 16:01:53 2014/08/12 15:53:30 146 FqdnRefresh FIN OK 15:53:30 2014/08/12 15:51:53 145 Commit FIN FAIL 15:51:59 2014/08/12 15:23:29 144 FqdnRefresh FIN OK 15:23:29 2014/08/12 15:19:32 143 Commit FIN FAIL 15:19:39 2014/08/12 15:11:02 142 Commit FIN FAIL 15:11:08
Job 143 schlug fehl. Wir lassen uns die Details anzeigen:
admin@PA1(active-primary)> show jobs id 143
Enqueued ID Type Status Result Completed
--------------------------------------------------------------------------
2014/08/12 15:19:32 143 Commit FIN FAIL 15:19:39
Warnings:
Details:ERROR: line:965: syntax error [peers_sa_ipaddr]
(Module: ikemgr)
Commit failed
Wichtig ist der Hinweis auf das Modul ikemgr, hier bohren wir weiter.
admin@PA1(active-primary)> show management-clients
Client PRI State Progress ------------------------------------------------------------------------- routed 30 P1-abort 0 ha_agent 25 P1-abort 0 device 20 P1-abort 0 ikemgr 10 P1-abort 0 * keymgr 10 init 0 (op cmds only) logrcvr 10 P1-abort 0 dhcpd 10 P1-abort 0 varrcvr 10 P1-abort 0 l3svc 10 P1-abort 0 sslvpn 10 P1-abort 0 rasmgr 10 P1-abort 0 useridd 10 P1-abort 0 satd 10 P1-abort 0 websrvr 10 P1-abort 0 sslmgr 10 P1-abort 0 authd 10 P1-abort 0 pppoed 10 P1-abort 0 dnsproxyd 10 P1-abort 0 cryptod 10 P1-abort 0 dagger 10 init 0 (op cmds only) Overall status: P1-abort. Progress: 0 Warnings: Errors: device: Config commit phase 1 aborted(Module: device) ikemgr: ERROR: line:965: syntax error [peers_sa_ipaddr] ikemgr: (Module: ikemgr)
Ein Blick in das Log:
admin@PA1(active-primary)> less mp-log ikemgr.log Aug 12 15:51:59 Revert to original BrightCloud categories Aug 12 15:51:59 Revert to original PAN categories Aug 12 15:51:59 Error: pan_ctrl_save_config(pan_config_handler_sysd. c:1672): Error compiling config Error: ipsec-crypto-profile default not defined Error: tunnel configuration error
Fehler gefunden: Das Profil „default“ wurde nicht gefunden.