Symptom

Deployment fails when interface is cleared from the security zone associated to a port channel

Conditions

Configure two interfaces with ifname inside and outside tagged to two security zones in_sz and out_sz. Configure ac rules using these sz’s Deploy the config Now clear the ifnames on both the ports and move those interfaces to two different port channels and associate to the respective security zones This is the case that , user is trying to migrate their config from 1 interface to a Port channel.

Workaround

Instead doing clearing the ifname and moving the interfaces into a Portchannel in same deploy . We can do 2 step deploy to avoid this issue. In first deploy clear the config on the interfaces In next step move the interfaces to Port channel and deploy.

Further Problem Description