FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
salemneaz
Staff
Staff
Article Id 350789
Description This article describes how to convert a Multi-VDOM firewall to No-VDOM.
Scope FortiOS v7.2 and above.
Solution

Revert from Multi-VDOM to No-VDOM gives an error at the cli after applying the following command:

 

config global
    config system global

        set vdom-mode no-vdom

 

The above command is hidden, it is necessary to type and run it completely, as it will not be visible if TAB is pressed or under 'show full'.

 

1.jpg

 

The error 'node_check_object fail! for vdom-mode no-vdom' means another VDOM exists at the firewall.

 

Use the command 'diagnose sys vd list' to find the VDOM index:

 

diagnose sys vd list
system fib version=63
list virtual firewall info:
name=root/root index=0 enabled fib_ver=0 rpdb_ver=0 use=41 rt_num=11 asym_rt=0 sip_helper=0, sip_nat_trace=1, mc_fwd=0, mc_ttl_nc=0, tpmc_sk_pl=0

 

name=Test/Test index=3 enabled fib_ver=0 rpdb_ver=0 use=8 rt_num=0 asym_rt=0 sip_helper=0, sip_nat_trace=1, mc_fwd=0, mc_ttl_nc=0, tpmc_sk_pl=0

 

For an explanation, see this article: Technical Tip: How to find the VDOM index ?.

 

Currently, there are two VDOMs: the 'root' management VDOM and 'Test'. The 'Test' VDOM needs to be deleted. To delete 'Test' VDOM, make sure all the references are removed, then only VDOM can be deleted.

 

2.jpg

 

Delete the 'Test' VDOM from the GUI.

 

3.jpg

 

The error will cease to appear after removing the non-management VDOM.

 

4.jpg