Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sw2090
SuperUser
SuperUser

Issue with proivisioning Template in FMG

I just ran into this:

 

I have an Adom in FMG. In this is a FGT100F I want to use for lab purposes. It was reseted to factory default before adding it to FMG. It added successfully and I can configure it in FMG. I was able to deploy device configuration to it successfully.

I then created a provisioning system template that assigns system dns, ntp etc. The template also does the interface config (creating vlan interfaces and afterwards configuring them). For the interface configuration one variable out of the policy package is used.

Once I assign that FGT100F to that template and try to deploy device config only it fails. There is no installation log available and the progress log only says "[fw-teststandort1[copy] root] Copy global shared objects failed (adom:my_Adom, dev:fw-teststandort1) (reason:none)". It does not provide any further information. Also dia deb app securityconsole 255 does not provide any more information.

 

Does anyone have a hint on how to further debug this to find the culprit?

The only non devdb object used is that variable and its only used in interface configs. The variable in policy package does have a valid per-device-mapping for this FGT100F.

 

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
1 Solution
sw2090
SuperUser
SuperUser

Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).

After correcting these it worked.  

Why cannot that be shown in the provided Logs and Cli debugs? 

 

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

View solution in original post

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
1 REPLY 1
sw2090
SuperUser
SuperUser

Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).

After correcting these it worked.  

Why cannot that be shown in the provided Logs and Cli debugs? 

 

-- 

"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors