cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
PhongNN
Iron

Error when trying to export package by import_export_package.py

Hi all

I have a trouble when trying to export a package from SMC. The message like this :

Exporting NAT policy

Getting information from show-nat-rulebase

Retrieved 50 out of 65 rules (76%)

Traceback (most recent call last):
File "import_export_package.py", line 59, in <module>
export_package(client, args)
File "D:\Python\ExportImportPolicyPackage-master\exporting\export_package.py", line 59, in export_package
nat_data_dict, nat_unexportable_objects = export_nat_rulebase(show_package.data["name"], client)
File "D:\Python\ExportImportPolicyPackage-master\exporting\export_nat_rulebase.py", line 13, in export_nat_rulebase
rulebase_rules, general_objects = get_query_nat_rulebase_data(client, {"package": package})
File "D:\Python\ExportImportPolicyPackage-master\exporting\export_objects.py", line 174, in get_query_nat_rulebase_data
if "Automatic Generated Rules : " in rulebase_item["name"]:
KeyError: 'name'

Does anyone have any ideas for this ?

Thank you

Regards

7 Replies
Admin
Admin

Re: Error when trying to export package by import_export_package.py

To troubleshoot, we’d need to see those first 50 NAT rules in the policy.
It’s possible there’s something there the script doesn’t like.
0 Kudos
PhongNN
Iron

Re: Error when trying to export package by import_export_package.py

Thanks for your reply

This is 50 rules nat

Screenshot_12.pngScreenshot_15.png

0 Kudos
Admin
Admin

Re: Error when trying to export package by import_export_package.py

Try enabling the disabled rules (don't push policy obviously) and see if it helps.
Note that most of the rules are automatic NAT rules which shouldn't necessarily get exported.
PhongNN
Iron

Re: Error when trying to export package by import_export_package.py

Thanks for your solution but it's does not work

enabled all disabled rules but the error message still appears

Thank you

 

Admin
Admin

Re: Error when trying to export package by import_export_package.py

The log file that is created by running the export might provide some clue as might api.elg from the manager (believe it's in $FWDIR/log).
0 Kudos
PhongNN
Iron

Re: Error when trying to export package by import_export_package.py

I saw in api.elg, the process 's stopped to nat rule 39, but I do not know why. Here is the detail log:
"rule-number" : 38,
"method" : "hide",
"auto-generated" : true,
"original-destination" : "97aeb369-9aea-11d5-bd16-0090272ccb30",
"translated-destination" : "85c0f50f-6d8a-4528-88ab-5fb11d8fe16c",
"original-source" : "b39291fa-09ba-480e-9dfc-dfaebb6eab97",
"translated-source" : "b39291fa-09ba-480e-9dfc-dfaebb6eab97",
"original-service" : "97aeb369-9aea-11d5-bd16-0090272ccb30",
"translated-service" : "85c0f50f-6d8a-4528-88ab-5fb11d8fe16c",
"meta-info" : {
"lock" : "unlocked",
"validation-state" : "ok",
"last-modify-time" : {
"posix" : 1479900853696,
"iso-8601" : "2016-11-23T18:34+0700"
},
"last-modifier" : "System",
"creation-time" : {
"posix" : 1479900853696,
"iso-8601" : "2016-11-23T18:34+0700"
},
"creator" : "System"
},
"comments" : "",
"enabled" : true,
"install-on" : [ "97aeb368-9aea-11d5-bd16-0090272ccb30" ]
}, {
"uid" : "465af4fe-4588-49d3-b792-2482e88ff20d",
"type" : "nat-rule",
"domain" : {
"uid" : "41e821a0-3720-11e3-aa6e-0800200c9fde",
"name" : "SMC User",
"domain-type" : "domain"
},
"rule-number" : 39,
"method" : "hide",
"auto-generated" : true,
"original-destination" : "97aeb369-9aea-11d5-bd16-0090272ccb30",
"translated-destination" : "85c0f50f-6d8a-4528-88ab-5fb11d8fe16c",
"original-source" : "91c9537f-f99e-401b-8bd7-51152f052a4f",
"translated-source" : "91c9537f-f99e-401b-8bd
--------------------------------------
2019-11-14 09:50:18,174 INFO org.apache.cxf.interceptor.LoggingInInterceptor.log:250 [qtp-22057241-25] - Inbound Message
0 Kudos
Admin
Admin

Re: Error when trying to export package by import_export_package.py

If you change Websense_88 so it doesn't have an automatic NAT enabled, what happens?
0 Kudos