Skip to main content
kkhushdeep
Staff
Staff
October 14, 2024

Technical Tip: To Delete IPSec VPN tunnel Phase2 selector

  • October 14, 2024
  • 0 replies
  • 5368 views
Description

This article explains how to delete IPSec phase 2 selector from the CLI of the FortiGate if there is no option to delete it from GUI.

Scope FortiGate.
Solution

In this example name of the phase2 selector of the IPSec tunnel is 'FGT_VPNIPSEC'. The following image shows the Phase 2 Selector configuration from the FortiGate GUI.

 

kkhushdeep_0-1728846267304.png

 

To delete the phase2 selector use the following commands:

 

config vpn ipsec phase2-interface

delete <Phase2Selector_name>

end

 

The following Image shows the example of deleting phase2 selector 'FGT_VPNIPSEC':

 

kkhushdeep_1-1728846267308.png

 

The following image shows the results from the FortiGate GUI.

 

kkhushdeep_2-1728846267310.png

 

The other way to do this is shown below with a tunnel called RA_test.

 

In the VPN tunnel section, select the number in the reference column, select the phase2 tunnel entry to be deleted, then select 'delete'.

 

ref.PNG

 

ref list.PNG