duplicate ipsec tunnels

[SergioLopez1]

Hello Comunity,

I have a weird issue, we upgrade a cluster to 10.1.5-h1 from a 9.1 version, after the upgrade on the gui i see all the ipsec tunnels duplicated for example i had an ipsec tunnel called vpn_consult, after the upgrade i had 2 ipsec tunnels called vpn_consult, all the tunnels are working, and in the merge-running-config.xml, i see all the tunnels ok, so, no double entries on the config xml.

someone have see this problem?

[reaper]

See if resetting your gui helps:

Https://<your firewall>/debug 

[SergioLopez1]

how reset GUI, just entering to that URL?

[SARowe_NZ]

Yeah I get this too. It is a graphic issue only as the duplicates do not appear in the CLI, and are true duplicates which is not possible under config validation.

I manage multiple different customer environments and it seems to have on upgrade to 10.0 or 10.1 (I have not tested 10.2). It has happened consistently on every upgrade I've done. All of these are panorama managed and the tunnels show one Panorama inherited tunnel (correct) and a duplicate copy of the same as firewall local (incorrect).

If any one finds a way to fix it please let us know as it is annoying and confusing to customers.

[SARowe_NZ]

Forgot to mention that it also appears in Panorama. The template shows a single copy of the VPN, however the Template stack shows 2 copies of all tunnels (all of them coming from the same Template which only has a single copy).

Weird bug.