Troubleshooting - lithnet/pan-ra-proxy GitHub Wiki
Troubleshooting the PAN RA Proxy
The proxy service logs all events to the Application event log, and advanced debugging information is available by setting the debug-enabled
flag to true in the configuration file.
Event IDs
The following event IDs can be logged by the service
Category | Severity | Event ID | Description |
---|---|---|---|
Configuration | Warning | 2001 | This event is logged as a warning that server certificate validation has been disabled in the configuration file |
XMLAPI | Error | 3002 | The API return an unknown error |
XMLAPI | Error | 3003 | The API returned an unknown response |
XMLAPI | Error | 3004 | The message to the API failed to send |
XMLAPI | Warning | 3005 | There was an error contacting the API, and the proxy will attempt to fail over to the next endpoint, if available |
XMLAPI | Warning | 3006 | The proxy service failed over to use another API endpoint |
XMLAPI | Error | 3007 | A failure code was returned from the XMLAPI in response to a user-id mapping login event |
XMLAPI | Error | 3008 | A failure code was returned from the XMLAPI in response to a user-id mapping logout event |
RADIUS | Error | 3101 | A RADIUS message was received from an unknown RADIUS host |
RADIUS | Error | 3102 | A RADIUS message was received but was missing one or mote attributes required to perform the user-id mapping |
RADIUS | Error | 3202 | An invalid RADIUS packet was received |
RADIUS | Info | 4001 | A RADIUS accounting request was received |
XMLAPI | Info | 4002 | The user-id update completed successfully |
Other | Info | 4003 | The user-id update request was discarded because it contained a username that matched the regular expression specified in the filter-username attribute of the configuration file |
Trace messages
Debug messages can be viewed without changing the configuration file or restarting the service by using a tool such as DebugView.
Performance Counters
The proxy service registers a variety of performance counters that can be used with perfmon to monitor throughput and error rates.