Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
quangnh2
New Contributor

Cannot delete Aggregate Interface also software switch Interface

Hi all,

I have a trouble with my fortigate 1500D

I configure it via my web console on my laptop. I create an aggregate port with members: port22 and port 24, I named that port DMZ2.

After that, on other laptop, I use web console to delete above aggregate interface and then I create a software switch with members: port22 and port24, I also use name port DMZ2

When I comeback to my laptop, I refresh web console, it show that port A is aggregate port and no members in it.

I cannot delete port DMZ2. I click Delete, it ask me "Are you sure you want to delete this entry", I click OK but it does not work.

I use cli to show and result below:

 

DSVN-fortigate1500D # show system interface DMZ2 config system interface     edit "DMZ2"         set vdom "root"         set type aggregate         set snmp-index 52     next end DSVN-fortigate1500D # show system switch-interface config system switch-interface     edit "DMZ2"         set vdom "root"         set member "port22" "port24"     next end

As the result of show, DMZ2 is an aggregate port with no member and also is switch port with two members port22 and port24.

 

DSVN-fortigate1500D # show system interface port22 config system interface     edit "port22"         set vdom "root"         set type physical         set snmp-index 24     next endDSVN-fortigate1500D # show system interface port24 config system interface     edit "port24"         set vdom "root"         set type physical         set snmp-index 26     next end but port22 and port24 still are physical port.

I create new software switch but port22 and port24 is not availability to choose.

Please help me!!!

Thanks and best regards!

 

 

2 REPLIES 2
quangnh2
New Contributor

I use command below

DSVN-fortigate1500D # diag sys checkused system.interface.name DMZ2 DSVN-fortigate1500D #

it show that DMZ2 is not use by any process.

I try to delete DMZ2 port

 

DSVN-fortigate1500D # config system interface DSVN-fortigate1500D (interface) # delete DMZ2 Can not delete a static table entry Command fail. Return code -61 DSVN-fortigate1500D (interface) #

DSVN-fortigate1500D # config system switch-interface DSVN-fortigate1500D (switch-interface) # delete DMZ2 switch_intf_unset:cannot find interface DMZ2 or not switch command_cli_delete:5408 delete table entry DMZ2 unset oper error ret=-3 Command fail. Return code -3 DSVN-fortigate1500D (switch-interface) #

It show above.

Please help me!!!

emnoc
Esteemed Contributor III

Interesting that FortiOS would allow the same name. What I would do,

 

1: if not in production a factory reset & restore a fresh backup

 

2: or download the cfg, remove the 2 interfaces via editor, restore the cfg and then continue

 

3: open a case with tac

 

if the OS was working correcting, it should not have allowed you to duplicate the same name "DMZ2" imho

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors