Unable to delete the tunnel interface on the Panorama

Unable to delete the tunnel interface on the Panorama

8987
Created On 04/29/24 23:11 PM - Last Modified 05/21/24 02:41 AM


Symptom


  • When trying to deleting the tunnel interface on Panorama, error message  "Error deleting Tunnel interface" and "Failed to delete Tunnel interface" is displayed
  • Although the message on GUI displays reference for template, the tunnel is not referenced anywhere.
Tunnel-interface-.png


Environment


  • Panorama
  • PANOS-10.2.8-hx
  • Tunnel Interface


Cause


Software Issue.

Resolution


  1. The issue is resolved under PAN-25013
  2. Fix is available in 11.1.2h4  and 11.1.3 versions
  3. Fix will also be available in the upcoming releases of 11.0.5, 10.2.10.
Workaround:
The workaround is to delete the configuration from the CLI
  1. login to the CLI and set the cli config-output-format to set
  2. Search for any existing configuration for the tunnel interface associated with the template (Example command for interface tunnel.20 below).
admin@Secondary-panorama(secondary-active)# show template BGP-OSPF-FW | match tunnel.20 
set template BGP-OSPF-FW config vsys vsys1 zone UNTRUST network layer3 [ ethernet1/1 ethernet1/2 tunnel.20 ] 
set template BGP-OSPF-FW config vsys vsys1 import network interface [ ethernet1/1 ethernet1/2 ethernet1/3 ethernet1/4 ethernet1/5 vlan loopback tunnel sdwan tunnel.20 ] 
set template BGP-OSPF-FW config network interface tunnel units tunnel.20 
set template BGP-OSPF-FW config network virtual-router VR-1 interface [ ethernet1/1 ethernet1/2 ethernet1/3 ethernet1/4 ethernet1/5 tunnel.20 ] 
  1. If there is any configuration still referenced in the template like below you can delete that configuration from the template
admin@Secondary-panorama(secondary-active)# delete template BGP-OSPF-FW config vsys vsys1 zone UNTRUST network layer3 tunnel.20
admin@Secondary-panorama(secondary-active)# delete template BGP-OSPF-FW config network virtual-router VR-1 interface tunnel.20
admin@Secondary-panorama(secondary-active)# delete template BGP-OSPF-FW config vsys vsys1 import network interface tunnel.20
admin@Secondary-panorama(secondary-active)# delete template BGP-OSPF-FW config network interface tunnel units tunnel.20



 


Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000oPF6CAM&lang=en_US&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Choose Language