Deleting a VPN

jtk
jtk Posts: 25 image  Freshman Member
First Comment Friend Collector First Anniversary
in Nebula

hi,

I set up a site-to-site VPN using VPN orchestrator. After setting it up, I found that I need to have the other end to be the one initiating the IPSEC tunnel. According to some internet post the initiator can't be changed, but the site that is added first in the orchestrator is chosen as the initiator.

So I thought I need to delete/remove the current VPN settings, but I can't find the way to remove the VPN in Nebula. All I can find is enable/disable buttons. Could you please tell me how to delete a site to site VPN created by VPN orchestrator?

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,976 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate
    edited September 22

    Hi @jtk

    I assume you mentioned the Nebula SD-VPN, not auto-link VPN. The VPN orchestrator entry is automatically generated when the firewall/security gateway/security router been added to a site.

    Since the VPN orchestrator page can't delete the entire entry of the SD-VPN (you can edit/enable/disable the entry), please navigate Site-wide > Configure > Security Gateway > Site-to-Site VPN, Site-wide > Configure > Firewall > Site-to-Site VPN or Site-wide > Configure > Security Router > Site-to-Site VPN to manually create VPN connections between sites.

    Please feel free to let me know if you need further assistance.

    Zyxel Melen


  • jtk
    jtk Posts: 25 image  Freshman Member
    First Comment Friend Collector First Anniversary

    thank you for your answer. The problem is that the Site-wide > Configure > Site-to-Site VPN pages don't have a "delete" button either. I can only disable, not delete the SD-VPN settings from there.

    Could you please tell me where I can delete the VPN?

  • Zyxel_Melen
    Zyxel_Melen Posts: 3,976 image  Guru Member
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @jtk

    Could you share a screenshot about which object you want to delete? On Nebula, disable the VPN configuration means that you remove the VPN configuration.

    Zyxel Melen


  • jtk
    jtk Posts: 25 image  Freshman Member
    First Comment Friend Collector First Anniversary
    edited September 24

    Yes. Disabling the VPN configuration on the site settings just marks the VPN site disabled on the orchestrator. It does not remove the configuration.

    On both sites:

    Kuvakaappaus 2025-09-24 17-44-59.png

    On the VPN Orchestrator:

    Kuvakaappaus 2025-09-24 17-45-57.png

    (about the "offline": there is no point for me to keep electricity on on 60AX before I can resolve this VPN issue.)

Categories

Nebula Tips & Tricks


    Read more

    Nebula Help Center

    EnglishTiếng ViệtРусскийไทย中文（台灣）