Skip to main content
salemneaz
Staff
Staff
October 21, 2024

Technical Tip: Change Multi VDOM to No-VDOM

  • October 21, 2024
  • 0 replies
  • 3041 views
Description This article describes how to convert a Multi-VDOM firewall to No-VDOM.
Scope FortiOS v7.2 and above.
Solution

Revert from Multi-VDOM to No-VDOM gives an error at the cli after applying the following command:

 

config global
    config system global

        set vdom-mode no-vdom

 

The above command is hidden, it is necessary to type and run it completely, as it will not be visible if TAB is pressed or under 'show full'.

 

1.jpg

 

The error 'node_check_object fail! for vdom-mode no-vdom' means another VDOM exists at the firewall.

 

Use the command 'diagnose sys vd list' to find the VDOM index:

 

diagnose sys vd list
system fib version=63
list virtual firewall info:
name=root/root index=0 enabled fib_ver=0 rpdb_ver=0 use=41 rt_num=11 asym_rt=0 sip_helper=0, sip_nat_trace=1, mc_fwd=0, mc_ttl_nc=0, tpmc_sk_pl=0

 

name=Test/Test index=3 enabled fib_ver=0 rpdb_ver=0 use=8 rt_num=0 asym_rt=0 sip_helper=0, sip_nat_trace=1, mc_fwd=0, mc_ttl_nc=0, tpmc_sk_pl=0

 

For an explanation, see this article: Technical Tip: How to find the VDOM index ?.

 

Currently, there are two VDOMs: the 'root' management VDOM and 'Test'. The 'Test' VDOM needs to be deleted. To delete 'Test' VDOM, make sure all the references are removed, then only VDOM can be deleted.

 

2.jpg

 

Delete the 'Test' VDOM from the GUI.

 

3.jpg

 

The error will cease to appear after removing the non-management VDOM.

 

4.jpg