topic Re: Delete VPN tunnel from the CLI in Spark Firewall (SMB)

Delete VPN tunnel from the CLI

Oliver_Fink — Tue, 24 Nov 2020 14:36:29 GMT

One of our customers is running two clusters of 1450 (R77.20.87, JHFA B990173042) managing a vpn connection to the central site with a VSX cluster (R80.30). The problem is that sometimes the 1450 does not delete IKE connections to the central site. Today, we saw 3 IKE connections running, only one of them with IPsec SAs. In these cases no packets pass to the central site.

I want to do some scripting to detect these situations. (I know: Pain in the a… on Embedded GAIA!) But the "vpn tu" utility is very limited on SMB appliances. It lacks the "vpn tu del" functionality. Such, one must use the menu system of "vpn tu" to delete any vpn tunnel.

Does any possibility exist to delete a vpn tunnel from the command line within a bash script?

Re: Delete VPN tunnel from the CLI

G_W_Albrecht — Tue, 24 Nov 2020 17:26:19 GMT

Yes - you have to write a bash script that will answer with the right numbers and letters for the command you need from the menue. This is possible in bash, i had an experienced collegue who did that for me (some time ago for another command).

Re: Delete VPN tunnel from the CLI

Oliver_Fink — Tue, 15 Dec 2020 12:53:09 GMT

Thanks. That is the answer I feared I would get. SMB with Embedded GIA remains being a pain in the a**.

Re: Delete VPN tunnel from the CLI

G_W_Albrecht — Tue, 15 Dec 2020 14:47:32 GMT

Dont be so hard on them 8)

Example was to enter y(es) upon command reboot:

(echo y ) | reboot

Re: Delete VPN tunnel from the CLI

G_W_Albrecht — Tue, 15 Dec 2020 17:59:11 GMT

Took about 15mins for a shell script dummy...

Re: Delete VPN tunnel from the CLI

G_W_Albrecht — Sun, 20 Dec 2020 10:08:22 GMT

Tried it yet ?