VDOM无法删除的处理方法
问题现象
删除VDOM时,有时会遇到删除了VDOM的所有关联对象后,仍无法删除空VDOM,如下VDOM1无法删除。
FortiGate # config vdom
FortiGate (vdom) # delete VDOM1
Domain VDOM1: used by interface, can not delete
Command fail. Return code -23
解决方法
通过查VDOM相关对象,只有系统自建的对象的引用,但还是无法删除VDOM。
FortiGate (global) # diagnose sys cmdb refcnt show system.vdom.name VDOM1 entry used by table system.interface:name 'l2t.VDOM1' entry used by table system.interface:name 'naf.VDOM1' entry used by table system.interface:name 'ssl.VDOM1' entry used by child table gui-dashboard:id '46' of entry used by child table gui-dashboard:id '47' of entry used by child table gui-dashboard:id '48' of entry used by child table gui-dashboard:id '49' of entry used by child table gui-dashboard:id '50' of entry used by child table gui-dashboard:id '51' of entry used by child table gui-dashboard:id '52' of entry used by child table gui-dashboard:id '53' of entry used by child table gui-dashboard:id '54' of entry used by child table gui-dashboard:id '55' of entry used by child table gui-dashboard:id '56' of table system.admin:name 'admin' entry used by child table gui-dashboard:id '22' of entry used by child table gui-dashboard:id '23' of entry used by child table gui-dashboard:id '24' of entry used by child table gui-dashboard:id '25' of entry used by child table gui-dashboard:id '26' of entry used by child table gui-dashboard:id '27' of entry used by child table gui-dashboard:id '28' of entry used by child table gui-dashboard:id '29' of entry used by child table gui-dashboard:id '30' of entry used by child table gui-dashboard:id '31' of table system.admin:name 'nap_fw_admin' entry used by table system.vdom-property:name 'VDOM1'
通过如下命令可以重置VDOM的引用关系:
diagnose sys cmdb refcnt reset system.vdom.name VDOM1(VDOM名称)
重置引用关系后,可以删除空VDOM VDOM1。
FortiGate # config vdom FortiGate (vdom) # delete VDOM1 FortiGate (vdom) #