Failure to push multiple Metadata-based policies in custom LSYS
Unable to push or update multiple metadata-based policies from Security Director 22.2R1 after pushing the first one. After pushing a firewall policy with metadata to the managed device, if you try to update the same firewall policy or try to push a new firewall policy with metadata the Update job will fail with the following error message:
[Error] Configuration update failed.
Severity : error
Message : statement creation failed
Details : feed-server
view-full-error-messageclick-here
<rpc-reply><ok xmlns:junos= http://xml.juniper.net/junos/23.2R1-S2.5/junos/>
</rpc-reply>
<rpc-reply xmlns="urn:ietf:params:xml:ns:netconf:base:1.0" xmlns:junos= http://xml.juniper.net/junos/23.2R1-S2.5/junos message-id="1">
<rpc-error>
<error-type>protocol</error-type>
<error-tag>operation-failed</error-tag>
<error-severity>error</error-severity>
<error-message>statement creation failed</error-message>
<error-info>
<bad-element>feed-server</bad-element>
</error-info>
</rpc-error>
This issue is not observed when pushing multiple metadata-based policies to the root logical system. Also, if you push multiple firewall policies with metadata to the root LSYS and then try to push firewall policies with metadata to the logical LSYS, the Update job will fail with the following error message which is expected behavior based on PR1814140.
At : [edit logical-systems <LS-name> security dynamic-address]
Message : Server 192.168.1.1 duplicates with server 192.168.1.1/lsys root-logical-system(0)
Details : feed-server 192.168.1.1
Message : Server already defined in lsys root-logical-system(0), please use other name
Message : configuration check-out failed
This is a reported bug in Security Director 22.2R1 that has been resolved in the latest releases.
PR1814140 has been fixed in version:
22.2 HPv7
23.1 HPv7
24.1R3 HPv1
To resolve this issue, please upgrade to latest supported Security Director version.