About MeCJay12

Hello! I have a Panorama running 11.2.2-h1 managing an A/P HA pair of VM firewalls running 11.1.6-h3. I'm trying to configure the firewalls' interfaces to configured their IPv6 addresses based on a prefix delegated by the ISP on the WAN + a ULA address. I'm running into the below commit validation error on the Panorama (not even making it to the firewall). I've attached some SS of my config. What am I doing wrong here? What can I do to troubleshoot? I've already tried disabling everything on the sub-interface (DPD, NDP monitoring, RAs, DNS, IPv6 entirely) one at a time without any luck. I also tried disabling LLDP on the parent interface Validation Error: devices -> localhost.localdomain -> template-stack -> Lab_Stack -> config -> devices -> localhost.localdomain -> network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.2 -> ipv6 -> inherited constraints failed : Inherited Interface, cannot have Static IPv6 Neighbor Discovery settings devices -> localhost.localdomain -> template-stack -> Lab_Stack -> config -> devices -> localhost.localdomain -> network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.2 -> ipv6 -> inherited is invalid   ... View more

Hello! I have a GP environment with one all in one NFGW (Portal/Ext GW/Int GW). It works great. Recently I added a second site with a similar setup for redundancy. The same DNS name points to both portals, the portals are setup to suggest both GWs equally, each has an internal GW; totally equal GP setups. The issue I now face is when a mobile client is connected to one site's external GW and joins the other site's local network, it doesn't transition to an internal GW. I watch the app and it will reconnect to the remote site's external GW. If I refresh the connection in the GP app, it connects to the internal GW as expected. If the client joins the same local network as the external GW it is connected to, it transitions correctly. Any ideas what is going on? ... View more