topic Re: Howto delete sub-interace from cli in General Topics

topic Re: Howto delete sub-interace from cli in General Topics https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14336#M10529 <HTML><HEAD></HEAD><BODY><P>Interesting, so you do not have any configuration and it still shows references !! What does the output of the show network interface show ? any references to sub-interfaces ?</P><P>Thanks,</P><P>Sandeep T</P></BODY></HTML> Fri, 15 Feb 2013 07:47:00 GMT sdurga 2013-02-15T07:47:00Z Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14328#M10521 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>I`m trying to delete a sub-interface from CLI but cant seem to find the correct command, i managed to remove the IP address and tag but not the entire sub-interface.</P><P></P><P>admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.20 </P><P></P><P>Server error : ethernet1/4.20 cannot be deleted because of references from:</P><P>import -> network -> interface</P><P>[edit]                        </P><P></P><P>Thanx</P><P>Kristian</P></BODY></HTML> Thu, 14 Feb 2013 09:23:59 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14328#M10521 u18830 2013-02-14T09:23:59Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14329#M10522 <HTML><HEAD></HEAD><BODY><P>The interface is assigned to vsys1</P><P></P><P>try this,</P><P></P><P>delete vsys vsys1 import network interface ethernet1/4.20</P></BODY></HTML> Thu, 14 Feb 2013 13:53:52 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14329#M10522 nextgenhappines 2013-02-14T13:53:52Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14330#M10523 <HTML><HEAD></HEAD><BODY><P>No, that`s not working. At least not on the pa-200.</P><P>Here is the output</P><P></P><P>admin@PA-200# delete vsys vsys1 import network interface ethernet1/4.20</P><P>Invalid syntax.</P><P>[edit]                                                                                                              </P><P>admin@PA-200# delete ?</P><P>  address                  address </P><P>  address-group            address-group </P><P>  application              application </P><P>  application-filter       application-filter </P><P>  application-group        application-group </P><P>  captive-portal           captive-portal </P><P>  deviceconfig             deviceconfig </P><P>  display-name             alphanumeric string [ 0-9a-zA-Z._-]</P><P>  email-scheduler          email-scheduler </P><P>  external-list            external-list </P><P>  global-protect           GlobalProtect</P><P>  group-mapping            group-mapping </P><P>  mgt-config               mgt-config </P><P>  network                  network configuration</P><P>  ocsp-responder           ocsp-responder </P><P>  pdf-summary-report       pdf-summary-report </P><P>  profile-group            profile-group </P><P>  profiles                 profiles </P><P>  region                   region </P><P>  report-group             report-group </P><P>  reports                  reports </P><P>  rulebase                 rulebase </P><P>  schedule                 schedule </P><P>  service                  service </P><P>  service-group            service-group </P><P>  setting                  setting </P><P>  shared                   shared </P><P>  threats                  threats </P><P>  ts-agent                 ts-agent </P><P>  url-admin-override       url-admin-override </P><P>  url-content-types        url-content-types </P><P>  user-id-agent            user-id-agent </P><P>  user-id-agent-sequence   user-id-agent-sequence </P><P>  user-id-collector        user-id-collector </P><P>  zone                     zone </P><P></P><P>admin@PA-200#</P></BODY></HTML> Thu, 14 Feb 2013 15:41:38 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14330#M10523 u18830 2013-02-14T15:41:38Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14331#M10524 <HTML><HEAD></HEAD><BODY><P>Follow these steps.</P><P></P><P>1 ) From the cli type</P><P></P><P>"set cli config-output-format set "</P><P></P><P>2) Now from the configuration mode type</P><P> "show network interface"</P><P>This will give you the configuration references where the sub-interface is referred.</P><P></P><P>For example I have done the same on my device and found out that my sub-interface ethernet 1/3.2 is referred in IPV6 routing settings as shown below.</P><P></P><P class="p1">ork interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement reachable-time unspecified</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement retransmission-timer unspecified</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement lifetime 1800</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement managed-flag no</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement other-flag no</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement enable-consistency-check no</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very router-advertisement link-mtu unspecified</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very enable-dad no</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very reachable-time 30</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very ns-interval 1</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 neighbor-disco</P><P class="p1">very dad-attempts 1</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 enabled no</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6 interface-id E</P><P class="p1">UI-64</P><P class="p1">set network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 adjust-tcp-mss no</P><P class="p1"></P><P class="p1"></P><P class="p1"></P><P class="p1">Now I have used  only one command to delete all these interface references which is </P><P class="p1"></P><P class="p1">"delete network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6"</P><P>which removed all the references from IPV6 now I have deleted the sub-interface with out any issues as I have already removed the references in the config.</P><P></P><P>Try the same, find out the references and remove the same.</P><P>Thanks,</P><P>Sandeep T</P></BODY></HTML> Thu, 14 Feb 2013 19:12:37 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14331#M10524 sdurga 2013-02-14T19:12:37Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14332#M10525 <HTML><HEAD></HEAD><BODY><P>Hi Sandeep T,</P><P></P><P>The command "delete network interface ethernet ethernet1/3 layer3 units ethernet1/3.2 ipv6" will only remove the ipv6 config lines, ipv4 and tag`s ++ wil still be on the interface.</P><P></P><P>I still get this message when trying to remove the interface:</P><P>admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 </P><P></P><P>Server error : ethernet1/4.10 cannot be deleted because of references from:</P><P>import -> network -> interface</P><P></P><P>/kristian</P></BODY></HTML> Thu, 14 Feb 2013 20:00:43 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14332#M10525 u18830 2013-02-14T20:00:43Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14333#M10526 <HTML><HEAD></HEAD><BODY><P>go to configure mode.</P><P></P><P>type show zone,</P><P></P><P>Look for "set zone <zone name> network layer3 ethernet1/4.20"</P><P></P><P>try delete zone <zone name> network layer3 ethernet 1/4.20</P></BODY></HTML> Thu, 14 Feb 2013 21:17:09 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14333#M10526 nextgenhappines 2013-02-14T21:17:09Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14334#M10527 <HTML><HEAD></HEAD><BODY><P>I was able to delete the sub-interface even with the tag config. Did you remove the zones, IP config ? If not try to remove that as shown in this document.</P><P></P><P class="p1"><SPAN class="s1"><A _jive_internal="true" class="active_link" href="https://live.paloaltonetworks.com/docs/DOC-2922">https://live.paloaltonetworks.com/docs/DOC-2922</A></SPAN></P><P class="p1"><SPAN class="s1"><BR /></SPAN></P><P class="p1"><SPAN class="s1">Thanks,</SPAN></P><P class="p1"><SPAN class="s1">Sandeep T<BR /><BR /></SPAN></P></BODY></HTML> Thu, 14 Feb 2013 23:18:18 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14334#M10527 sdurga 2013-02-14T23:18:18Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14335#M10528 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>The zone configuration has already been removed:</P><P>admin@PA-200# show zone</P><P>set zone trust network layer3 ethernet1/2</P><P>set zone untrust network layer3 ethernet1/1</P><P>[edit]                                                                                                                                                </P><P>admin@PA-200#</P><P></P><P>As you can see in the picture the is no Management Profile, vr, vlan tag or security zones configured on the interface.</P><P></P><P><IMG alt="" class="jiveImage" src="https://live.paloaltonetworks.com/legacyfs/online/5620_pastedImage_0.png" style="width: 1200px; height: 59px;" /></P><P></P><P>/kristian</P></BODY></HTML> Fri, 15 Feb 2013 07:41:41 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14335#M10528 u18830 2013-02-15T07:41:41Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14336#M10529 <HTML><HEAD></HEAD><BODY><P>Interesting, so you do not have any configuration and it still shows references !! What does the output of the show network interface show ? any references to sub-interfaces ?</P><P>Thanks,</P><P>Sandeep T</P></BODY></HTML> Fri, 15 Feb 2013 07:47:00 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14336#M10529 sdurga 2013-02-15T07:47:00Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14337#M10530 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P></P><P>Here is the output of the show command:</P><P></P><P>admin@PA-200# show network interface ethernet ethernet1/4 </P><P>set network interface ethernet ethernet1/4 link-speed auto</P><P>set network interface ethernet ethernet1/4 link-duplex auto</P><P>set network interface ethernet ethernet1/4 link-state auto</P><P>set network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 </P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.10</P><P></P><P>Server error : ethernet1/4.10 cannot be deleted because of references from:</P><P>import -> network -> interface</P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200#</P><P></P><P>Now when I try to commit I get the error:</P><P>admin@PA-200# commit </P><P>..</P><P>network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.10 constraints failed : tag is required</P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# </P><P></P><P>Now after putting the tag back on and after a commit, you can see the reference to the import -> interface here:</P><P></P><P>admin@PA-200> show config running </P><P></P><P>config {</P><P>  devices {</P><P>    localhost.localdomain {</P><P>      network {</P><P>        interface {</P><P>          ethernet {</P><P>            ethernet1/4 {</P><P>              link-speed auto;</P><P>              link-duplex auto;</P><P>              link-state auto;</P><P>              layer3 {</P><P>                units {</P><P>                  ethernet1/4.10 {</P><P>                    tag 10;</P><P>                  }</P><P>                }</P><P>              }</P><P>            }</P><P>          }</P><P></P><P>      }</P><P>      vsys {</P><P>        vsys1 {</P><P>          import {</P><P>            network {</P><P>              interface [ ethernet1/3 ethernet1/4 ethernet1/1 ethernet1/4.10];</P><P>            }</P><P>          }</P><P></P><P>/kristian</P></BODY></HTML> Fri, 15 Feb 2013 08:09:08 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14337#M10530 u18830 2013-02-15T08:09:08Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14338#M10531 <HTML><HEAD></HEAD><BODY><P>can you do a commit force once using the command "commit force" and try deleting the interface once, if it does not work I would recommend you to open a case with support for further assistance on this.</P><P></P><P>Thanks,</P><P>Sandeep T</P></BODY></HTML> Fri, 15 Feb 2013 08:48:34 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14338#M10531 sdurga 2013-02-15T08:48:34Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14339#M10532 <HTML><HEAD></HEAD><BODY><P>Looks the same... This might be a PA-200 issue, i`l try it on a bigger box when I get the time.</P><P></P><P>Thanks for all the help.</P><P></P><P>admin@PA-200# show network interface ethernet ethernet1/4</P><P>set network interface ethernet ethernet1/4 link-speed auto</P><P>set network interface ethernet ethernet1/4 link-duplex auto</P><P>set network interface ethernet ethernet1/4 link-state auto</P><P>set network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 tag 10</P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 tag</P><P></P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# show network interface ethernet ethernet1/4</P><P>set network interface ethernet ethernet1/4 link-speed auto</P><P>set network interface ethernet ethernet1/4 link-duplex auto</P><P>set network interface ethernet ethernet1/4 link-state auto</P><P>set network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 </P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# delete network interface ethernet ethernet1/4 layer3 units ethernet1/4.10</P><P></P><P>Server error : ethernet1/4.10 cannot be deleted because of references from:</P><P>import -> network -> interface</P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# commit force </P><P>+ partial   partial </P><P>  <Enter>   Finish input</P><P></P><P>admin@PA-200# commit force </P><P></P><P></P><P>..</P><P>network -> interface -> ethernet -> ethernet1/4 -> layer3 -> units -> ethernet1/4.10 constraints failed : tag is required</P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# show network interface ethernet ethernet1/4</P><P>set network interface ethernet ethernet1/4 link-speed auto</P><P>set network interface ethernet ethernet1/4 link-duplex auto</P><P>set network interface ethernet ethernet1/4 link-state auto</P><P>set network interface ethernet ethernet1/4 layer3 units ethernet1/4.10 </P><P>[edit]                                                                                                                                                                      </P><P>admin@PA-200# </P></BODY></HTML> Fri, 15 Feb 2013 08:53:46 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/14339#M10532 u18830 2013-02-15T08:53:46Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/227063#M65350 <P>Just ran into this. This worked:</P><P> </P><PRE>delete import network interface ethernet1/4.10</PRE> Tue, 14 Aug 2018 18:07:15 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/227063#M65350 fwmike 2018-08-14T18:07:15Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/483976#M104395 <P>Follow the error message. The node it states the reference is at is  Import > network > interface.</P><P>First off, viewing the config in XML is painful so I recommend doing </P><P> </P><P> </P><LI-CODE lang="markup">set cli config-output-format set</LI-CODE><P> </P><P> </P><P>which will give you the config as set statements which are a tonne easier to read.</P><P> </P><P>Type:</P><P> </P><P> </P><LI-CODE lang="markup">configure show import network </LI-CODE><P> </P><P> </P><P> </P><P>You will probably still see the interface listed under interfaces still.</P><P>So to fix that you just do:</P><P> </P><P> </P><LI-CODE lang="markup">configure delete import network interface ethernet1/4.20</LI-CODE><P> </P><P>This will remove that interface from the list and in turn remove the reference. You may find the subinterface is now deleted, but if not you should now be able to run the original delete command without it failing.</P><P> </P> Sat, 30 Apr 2022 10:21:47 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/483976#M104395 Skilldibop 2022-04-30T10:21:47Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/588671#M117358 <P>Also if you have pushed subinterface from Panorama to PA and you get this error</P> <P> </P> <P>Failed to delete Ethernet Interface - .  ethernet1/12.3402 cannot be deleted because of references from:, template -> Test -> config -> devices -> localhost.localdomain -> vsys -> vsys1 -> import -> network -> interface.</P> <P> </P> <P>From Panorama Config mode</P> <P>#delete template Test config vsys vsys1 import network interface eth1/12.3402 </P> <P> </P> <P>After this Command you will be able to delete the sub interface from Panorama and then Push the config to PA.</P> <P> </P> <P>Regards</P> Tue, 04 Jun 2024 03:45:14 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/588671#M117358 MP18 2024-06-04T03:45:14Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/590089#M117576 <P>This worked great. You're a lifesaver. Many thanks!</P> Fri, 21 Jun 2024 14:28:09 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/590089#M117576 TErwineFIATech 2024-06-21T14:28:09Z Re: Howto delete sub-interace from cli https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/594421#M118307 <P>This save our migration, thank you so much mate </P> Thu, 08 Aug 2024 22:54:46 GMT https://live.paloaltonetworks.com/t5/general-topics/howto-delete-sub-interace-from-cli/m-p/594421#M118307 rmadali12 2024-08-08T22:54:46Z