Deleting a VPN

jtk

hi,

I set up a site-to-site VPN using VPN orchestrator. After setting it up, I found that I need to have the other end to be the one initiating the IPSEC tunnel. According to some internet post the initiator can't be changed, but the site that is added first in the orchestrator is chosen as the initiator.

So I thought I need to delete/remove the current VPN settings, but I can't find the way to remove the VPN in Nebula. All I can find is enable/disable buttons. Could you please tell me how to delete a site to site VPN created by VPN orchestrator?

Zyxel_Melen

Hi @jtk

I assume you mentioned the Nebula SD-VPN, not auto-link VPN. The VPN orchestrator entry is automatically generated when the firewall/security gateway/security router been added to a site.

Since the VPN orchestrator page can't delete the entire entry of the SD-VPN (you can edit/enable/disable the entry), please navigate Site-wide > Configure > Security Gateway > Site-to-Site VPN, Site-wide > Configure > Firewall > Site-to-Site VPN or Site-wide > Configure > Security Router > Site-to-Site VPN to manually create VPN connections between sites.

Please feel free to let me know if you need further assistance.

jtk

thank you for your answer. The problem is that the Site-wide > Configure > Site-to-Site VPN pages don't have a "delete" button either. I can only disable, not delete the SD-VPN settings from there.

Could you please tell me where I can delete the VPN?

Zyxel_Melen

Hi @jtk

Could you share a screenshot about which object you want to delete? On Nebula, disable the VPN configuration means that you remove the VPN configuration.

jtk

Yes. Disabling the VPN configuration on the site settings just marks the VPN site disabled on the orchestrator. It does not remove the configuration.

On both sites:

On the VPN Orchestrator:

(about the "offline": there is no point for me to keep electricity on on 60AX before I can resolve this VPN issue.)