How do I see where an address is being used??

[zmag]

I am trying to change the associated interface for a route based tunnel. In order to do this I have to delete the address and recreate it, but i am unable to do so because " cannot change interface binding! This address is being used." I dont see it in any group or policy. Is there a way to show where this is being used?

[Carl_Wallmark]

Hi, take a look at this: http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD30620&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=11077329&stateId=0 0 11075817

[ede_pfau]

Hi, there are inofficial debug commands to show you the objects connected to it. But I recommend a different approach which works 100% of the time regardless of the FortiOS version: - download the current config, unencrypted - edit the entry you would like to change, in this case the interface IP - restore the config from this file The unit will reboot now. You should have a local serial connection to the console as config errors only show up there. Or you may use the command

diag debug config-error-log read

after the reboot from the CLI.

[zmag]

Thanks, I should have included my build version, FG 620 4.0 MR2. I dont have the " diag sys checkused" command but I was able to edit the conf file and reload it. That' s a great fix for an offline box, but i wonder about downtime once in production. Good for now.

[rwpatterson]

If you at least search the config, you' ll know where the associations are that need to be deleted, then do it old school.

[FortiRack_Eric]

the correct syntax is in this case: dia sys checkused firewall.address.name <address name> cheers, Eric