Deleting existing VLAN

[melvyn-lee]

I am having difficulty deleting an existing VLAN within the Addressing & VLAN page on the dashboard of my MX64 Router / Firewall. When I try to delete the VLAN the following error message is generated "There were errors in saving this configuration. The IP address range 192.168.201.0/24 does not apply to any configured local or VPN subnets", despite the fact the subnet is listed. I note that the appearance of the subnet table on the Addressing & VLAN page has changed since Firmware Upgrade MX17.7, which took place a week ago. I suspect the upgrade has caused the problem but the only way I could prove it would be to restore the previous version although I am reluctant to do that.

Has anyone experienced a similar VLAN problem ? I have raised a Support Case and am awaiting a response.

[ww · Accepted solution]

I think @Tony_Ang Answer here https://community.meraki.com/t5/Security-SD-WAN/Delete-VLAN-MX/m-p/44525/highlight/true#M11283 would fix that

[melvyn-lee]

Hi ww.

Deleting two firewall rules pertaining to the VLAN subnet then allowed me to delete the VLAN. Many thanks for your help, it's greatly appreciated.

[Brash]

As @ww indicated you're still referencing that subnet in a firewall rules somewhere. You need to delete the rule (or change the subnet on the rule) before deleting the vlan.

When looking at the error it from that point of view it's logical, but it could definitely be more user friendly/readable. 

[melvyn-lee]

Hi Brash. You are absolutely correct, deleting the two firewall rules allowed me to delete the VLAN. The error message was no help at all.

Many thanks for your help, greatly appreciated.

[PhilipDAth]

The last time this happened to me it was because a NAT rule referenced an IP address in the VLAN being deleted.

[melvyn-lee]

Hi PhilipDAth. Many thanks for your advice. I did have a 1:1 NAT that referred to the VLAN subnet but I had already deleted it. I discovered that a Firewall Rule also had reference to that subnet. Once I deleted the rule I was able to delete the VLAN.

Thanks Again, your advice is greatly appreciated