Skip to main content
tino_p
Staff
Staff
July 8, 2024

Troubleshooting Tip: Cannot delete no-reference object

  • July 8, 2024
  • 0 replies
  • 2470 views
Description

This article describes the behavior where it is impossible to delete the FortiGate object that has no references or its references were deleted. For example, the IPSec phase1-interface or SLA performance object, with the following error:

 

"...FW(health-check) # delete SLA_01
The entry is used by other 1 entries
Command fail. Return code -23..."

 

The only way to delete those objects is to reboot the Firewall, which is not always possible in the production environment.

Scope FortiGate.
Solution

Check after connecting the console cable if the console keeps printing output like the one given below:

 

"...FW (health-check) # unregister_netdevice: waiting for .... to become free. Usage count = 105
unregister_netdevice: waiting for .... to become free. Usage count = 105
unregister_netdevice: waiting for .... to become free. Usage count = 105
unregister_netdevice: waiting for .... to become free. Usage count = 105
unregister_netdevice: waiting for .... to become free. Usage count = 105

..."

 

Workaround: Disable the 'net-device' in the 'phase1-interface' settings of the IPsec Tunnel. 

 

config vpn ipsec phase1-interface

    edit vpn1

        set net-device disable

end

 

This behavior is a known issue and can be tracked as per Bug ID: 1033154. As per the release notes 7.2.11 Release Notes 
this behavior could be resolved by upgrading FortiOS version to v7.2.11, v7.4.5, v7.6.0, or above. If upgrading FortiOS is not feasible, apply the workaround instead.