Skip to main content
rodjeur
rodjeur
New Member
February 7, 2012
Question

Unable to delete a VPN phase2

  • February 7, 2012
  • 3 replies
  • 7545 views
Hi, After creating a VPN ipsec phase2 in order to make tests with our new vpn Fortigate, we have deleted it because it is not used under production' s environnment. But this phase2 remains visible under " VPN/Monitor IPsec" . Is it possible to delete it ? Thanks.

    3 replies

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 7, 2012
    In the console window, type ' diag vpn tunnel flush' . This kills ALL tunnels though so the valid ones have to renegotiate.
    rodjeur
    rodjeurAuthor
    New Member
    February 7, 2012
    Thanks ede_pfau, I' ve tried your command, but the phase2 still persists in the list of tunnel. I can see it with such a command: " diagnose vpn tunnel list" It appears like this: " proxyid=<name_of_phase2> proto=0 sa=0 ref=1 auto_negotiate=0 serial=23 src: 0:<ip_src>:0 dst: 0:<ip_dest/mask>:0" I' ve tried this command too, but unsuccessfully: " diagnose vpn tunnel deloutbsa <name_of_phase2>" I need at least one SPI, but I have no one... No idea ?
    rodjeur
    rodjeurAuthor
    New Member
    February 8, 2012
    Ok, I have created a new phase2 with same name and same parameters than the old one, and I was able to delete it properly. The old one is now completly removed. Bye.
    Terms & ConditionsCookie settingsAccessibility statement