How to delete phase1-interface?

[FlavioB]

Hello everybody. I need to remove an IPSec VPN I created, but I only managed to get the phase2-interface deleted. How do I need to proceed to get rid of the phase1-interface? I tried in the CLI with " config vpn ipsec phase-1interface" then " delete VPNNAME" but I got told that the phase1-interface was being used. Any help will be appreciated. Thanks, F.

[Carl_Wallmark]

You need to delete all references to that tunnel before deleting the actual tunnel. policy, routes, dhcp etc...

[FlavioB]

Hy. I managed to delete the routing entry and every policy. There are no DHCP Servers relating to it... Still, I cannot remove that Phase1-Interface... What else? F.

[Carl_Wallmark]

Firewall objects ? (addresses, VIPs etc...) Have you a widget with the tunnel on it ? there is a command in the CLI to find out what you forgot: http://kb.fortinet.com/kb/documentLink.do?popup=true&externalID=FD30620&languageId=

[FlavioB]

Hello again. No Addresses, no VIPs... The CLI-command " checkused" is great, but is there also some sort of " manual" of which tables there exist? I need to check a phase1-interface, I thought it' d be vpn.ipsec.phase1-interface " VPNNAME" but it doesn' t seem to be like that... Thanks again, F.

[Carl_Wallmark]

in this situation, i would download the config file, and open it in wordpad and search for the tunnel name

[FlavioB]

Finally I got it done: just needed to look at the VPN-Interface in the " Network - Interfaces" view. There you have the correct number of references... Thanks anyway! F.