Cannot delete VPN tunnel configuration

Forum|Forum|14 years ago
April 18, 2012
4 replies
22179 views

I cannot delete the PH1 of an existing tunnel configuration. All rules have been deleted. Routing also. When I try the command: XXX-XXXX(phase1-interface)#delete TUNNEL-NAME this is what I get: This phase1-interface is currently used command_cli_delete:3724 delete table entry TUNNEL-NAME unset oper error ret=-23 Command fail. Return code -23 Reboot the box would be a nightmare, anyone has a solution to this? Thanks!

ede_pfau

SuperUser

Hi, welcome to the forums. A phase1 in interface mode is an interface. You can attach several objects to an interface, including - addresses - VIPs - IP pools - a DHCP server - policies - routes - policy routing I' d get a backup of the config and search it with an editor for the phase1 name. Aside, does it really bug you to have a dangling phase1?

TomFortinetAuthor

New Member

Hi Thanks for the hints I would not bother actually...but a customer is flogging me!!

This is also why I am looking for a silver bullet. Every change I do has to be scheduled and approved and it would look very bad if I gave the impression to rummage in his configuration rather then make some aimed changes. Thanks!