Delete VPN tunnel from the CLI

[Oliver_Fink]

One of our customers is running two clusters of 1450 (R77.20.87, JHFA B990173042) managing a vpn connection to the central site with a VSX cluster (R80.30). The problem is that sometimes the 1450 does not delete IKE connections to the central site. Today, we saw 3 IKE connections running, only one of them with IPsec SAs. In these cases no packets pass to the central site.

I want to do some scripting to detect these situations. (I know: Pain in the a… on Embedded GAIA!) But the  "vpn tu" utility is very limited on SMB appliances. It lacks the "vpn tu del" functionality. Such, one must use the menu system of "vpn tu" to delete any vpn tunnel.

Does any possibility exist to delete a vpn tunnel from the command line within a bash script?

[G_W_Albrecht]

Yes - you have to write a bash script that will answer with the right numbers and letters for the command you need from the menue. This is possible in bash, i had an experienced collegue who did that for me (some time ago for another command).

[Oliver_Fink]

Thanks. That is the answer I feared I would get. SMB with Embedded GIA remains being a pain in the a**.

[G_W_Albrecht]

Dont be so hard on them 😎

Example was to enter y(es) upon command reboot:

(echo y ) | reboot

[G_W_Albrecht]

Tried it yet ?

[G_W_Albrecht · Accepted solution]

Click to Expand

Took about 15mins for a shell script dummy...