Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Christian_Koehl
Collaborator
Collaborator

Remove interface from VSX systems.

Dear CheckMates,

I have running a VSX Cluster with VSLS with some bond interfaces in version R80.20. A couple of VLANs were added to bond1 and in each of my VS systems one of this bond1 VLAN interfaces is used.

Now, the bond1 needs to be remove.
Therefore, I have deleted the bond1 VLAN interface in every VS and installed the policy within that VS.

 

A "show configuration" still shows the configuration for all the bond1 VLAN interfaces.
"vsx_utill show_interfaces" did't show them.


How to remove the configuration for the bond1 interface completly?

Best regards,
Christian

12 Replies
Maarten_Sjouw
Champion
Champion

Did you push the policy after you removed the VLAN interfaces? It really sounds like you did not.
Regards, Maarten
mdjmcnally
Advisor

Did you select to remove Bond1 from Physical Interfaces on the actual VSX Cluster Object and then install the Policy to the VSX Cluster itself.

I believe that afterwards will have to SSH to the box

set vsx off

delete bonding group bond1

set vsx on

Make Sure install policies afterwards

Should remove the bond1 from the VSX Cluster and then remove the bond from the VSX box.

0 Kudos
Christian_Koehl
Collaborator
Collaborator

I have installed the policy. It tooks me some time, as I have done this in about 9 different Domains / for 9 different gateways....

 

This steps, as requested, I will do the next time, when I am at the customer.

   set vsx off
   delete bonding group bond1
   set vsx on

 

Thanks to all for your help,

Christian

0 Kudos
Christian_Koehl
Collaborator
Collaborator

Hi folks,

Sorry for not updating this post earlier.

I run the command "set vsx off" and tried to delete the bond, but it still fails with the error-message "This interface is used by the Dynamic Routing Protocol: Static Routes. Cannot delete the selected interface."

interface.jpg

Any ideas?

Best regards,

Christian

 

 
Maarten_Sjouw
Champion
Champion

you need to remove any IP if still there on the interface.
Regards, Maarten
0 Kudos
Christian_Koehl
Collaborator
Collaborator

Hi Maarten,

in the screenshot you can see in the background, the IP for bond1.4031 is deleted, but I still can't delete the VLAN interface itself.

Best regards,

Christian

0 Kudos
mdjmcnally
Advisor

How are you trying to delete the vlan interface?

 

 

I ask as the WebUI which I am guessing is being run AFTER running the set vsx off as VSX doesn't have the WebUI enabled is showing interfaces with IP from the VSX Network.

 

You won't be able to delete the bond1 until all of those sub-interfaces are removed.

I would expect that they are deleted in the SmartConsole for the VS that they are created in and then after the topology updates then says to install the security policy.

 

You said that did this but is contradicted by seeing the vlan interfaces exist in the WebUI which to access would need to have the VSX turned off.

 

0 Kudos
Maarten_Sjouw
Champion
Champion

Are you trying to remove the BOND interface or only a VLAN?
You will not be able to see all information from VSX in the GUI.
As Hugo says get the info from the Show configuration to see what is going on.
Regards, Maarten
0 Kudos
Luis_Romero
Explorer

I get the same error when deleting the vlan by webui and cli, did they manage to fix it?

Hugo_vd_Kooij
Advisor

Check your config very carefully.

I would use at least:

clish -c "show configuration" | grep bond

It might show you some leftovers you need to take care of. 

<< We make miracles happen while you wait. The impossible jobs take just a wee bit longer. >>
0 Kudos
Daniel_Taney
Advisor

Did you also remove the bond interface from the Physical Interfaces tab of the VSX Cluster Properties? If there are no VLANs left on this bond group, you don't want it listed here.

physical_interface.jpg

 

R80 CCSA / CCSE
0 Kudos
Maarten_Sjouw
Champion
Champion

On second thoughts The only way to remove a VLAN interface on a VSX system is by deleting that interface from the VS it is used in.
Only when you have removed all VLAN's from the Bond interface, will you be able to remove the interface itself.
Regards, Maarten
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events