Cannot delete a Virtual Network Gateway

Question

Cannot delete a Virtual Network Gateway

董晉瑋(Andy.Dong) 25

In the portal, the task to delete fails with this error message: The resource operation completed with terminal provisioning state 'Failed'.

Can't delete even with powershell

It's been two days since the error,

I can't use and can't delete but I'm charged.

User's image

JimmySalian-2011 44,721 Reputation points

2023-05-16T08:23:08.3833333+00:00

This looks like a resource is locked in the backend, can you raise a support request via the portal and someone from MS should be able to assist you to remove the lock and delete the resource - https://azure.microsoft.com/en-ca/support/create-ticket/

Please don't forget to upvote and Accept as answer if the reply is helpful
GitaraniSharma-MSFT 50,186 Reputation points Microsoft Employee Moderator

2023-05-16T09:24:16.2366667+00:00
Hello @董晉瑋(Andy.Dong) ,

Could you please try the below provided steps:

Open a web browser and navigate to https://resources.azure.com

Log-in to the appropriate Azure account.

In the blade on the left side of the browser, expand subscriptions, then expand the desired subscription name.

In the blade on the left side of the browser, expand resource groups.

Under resource groups, expand the proper Resource Group Name "eLife".

Under the Resource Group "eLife", expand providers.

Under providers, expand Microsoft.Network.

Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway.

Near the top of the content window of the browser, select the Read/Write push button.

Select the Data (GET, PUT) tab and click on GET.

Then click on Edit but do not make any changes.

Finally click on PUT.

This should help the VPN gateway to recover from the failed state.

Post the above step:

Under Microsoft.Network, expand Connections.

Under Connections, check and see if you are able to find any connections.

If you find a connection:

Select the Connection name and near the top of the content window of the browser, select the Read/Write push button.

Select the Actions (POST, DELETE) tab and click on Delete.

Once this connection is deleted, you can retry to delete the gateway.

If you do not find a connection:

Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway and Select the Actions(POST, DELETE) tab and click on Delete.

Confirm that the gateway is deleted.

If it does not succeed and you receive an error, please share the error for further investigation.

If you are unable to recover/delete the gateway, we would need to open a support case to get it removed from the backend.

Regards,

Gita
董晉瑋(Andy.Dong) 25 Reputation points

2023-05-17T06:19:29.4133333+00:00

HI @GitaraniSharma-MSFT

I have followed the steps you provided.

on portal.
The VPN gateway has not been deleted and the error still persists.
Luca Lionetti 3,311 Reputation points

2023-05-17T07:28:58+00:00

Hello @董晉瑋(Andy.Dong)

Have you checked that there are no connections configured?

You can also try to use the -force command

Remove-AzVirtualNetworkGateway -Name myGateway -ResourceGroupName myRG -force

Hope this helps

Cheers

Luca
GitaraniSharma-MSFT 50,186 Reputation points Microsoft Employee Moderator

2023-05-17T07:55:15.3666667+00:00
@董晉瑋(Andy.Dong) , thank you for the update.

As mentioned in my previous comment if you are unable to recover/delete the VPN gateway following the advised steps, then you need to open a support case to get it removed from the backend. So, if you have a support plan, I request you file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

In case you need help with a one-time free technical support, I would request you to send an email with subject line "ATTN gishar | Cannot delete a Virtual Network Gateway" to AzCommunity[at]Microsoft[dot]com with the following details and I will follow-up with you.

Reference this Q&A thread

Your Azure Subscription ID

Note: Do not share any PII data as a public comment.

We will post a summarized answer once the issue is resolved.

Regards,

Gita
Luca Lionetti 3,311 Reputation points

2023-05-17T08:00:01.4733333+00:00

you can also try this commands in powershell

$GW=get-Azvirtualnetworkgateway -Name "GW1" -ResourceGroupName "RG1"

then check for any connections

get-Azvirtualnetworkgatewayconnection -ResourceGroupName "RG1" | where-object {$_.VirtualNetworkGateway1.Id -eq $GW.Id}

$Conns=get-Azvirtualnetworkgatewayconnection -ResourceGroupName "RG1" | where-object {$_.VirtualNetworkGateway1.Id -eq $GW.Id}

and then delete all connections

$Conns | ForEach-Object {Remove-AzVirtualNetworkGatewayConnection -Name $.name -ResourceGroupName $.ResourceGroupName}
董晉瑋(Andy.Dong) 25 Reputation points

2023-05-17T08:08:47.46+00:00

HI @Luca Lionetti

Thank you for your response.

Yes, I have confirmed that there are no connections on the VPN gateway.

I have also tried using PowerShell to delete the VPN gateway, but I still encountered an error, just like the screenshot I posted in the beginning of the thread.
Bas Pruijn 956 Reputation points

2023-05-19T09:37:58.9766667+00:00

Sometimes it really helps to delete the resource group the resource is in. This however is cumbersome if some other resources reside in the same resource group and you do not want to delete them. A potential work-around (depending on your situation) is to either move the resources you want to keep, or the resources you want to remove to a newly created resource group and then remove the resource group containing the misbehaving resource.

Futhermore, you can try removing it via PowerShell and add the Force directive to your remove command.(https://learn.microsoft.com/en-us/powershell/module/az.network/remove-azvirtualnetworkgateway?view=azps-9.7.1)

Answer accepted by question author

0 additional answers

Your answer

JimmySalian-2011 44,721 Reputation points

2023-05-16T08:23:08.3833333+00:00

This looks like a resource is locked in the backend, can you raise a support request via the portal and someone from MS should be able to assist you to remove the lock and delete the resource - https://azure.microsoft.com/en-ca/support/create-ticket/

Please don't forget to upvote and Accept as answer if the reply is helpful
GitaraniSharma-MSFT 50,186 Reputation points Microsoft Employee Moderator

2023-05-16T09:24:16.2366667+00:00

Hello @董晉瑋(Andy.Dong) ,

Could you please try the below provided steps:

Open a web browser and navigate to https://resources.azure.com

Log-in to the appropriate Azure account.

In the blade on the left side of the browser, expand subscriptions, then expand the desired subscription name.

In the blade on the left side of the browser, expand resource groups.

Under resource groups, expand the proper Resource Group Name "eLife".

Under the Resource Group "eLife", expand providers.

Under providers, expand Microsoft.Network.

Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway.

Near the top of the content window of the browser, select the Read/Write push button.

Select the Data (GET, PUT) tab and click on GET.

Then click on Edit but do not make any changes.

Finally click on PUT.

This should help the VPN gateway to recover from the failed state.

Post the above step:

Under Microsoft.Network, expand Connections.

Under Connections, check and see if you are able to find any connections.

If you find a connection:

Select the Connection name and near the top of the content window of the browser, select the Read/Write push button.

Select the Actions (POST, DELETE) tab and click on Delete.

Once this connection is deleted, you can retry to delete the gateway.

If you do not find a connection:

Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway and Select the Actions(POST, DELETE) tab and click on Delete.

Confirm that the gateway is deleted.

If it does not succeed and you receive an error, please share the error for further investigation.

If you are unable to recover/delete the gateway, we would need to open a support case to get it removed from the backend.

Regards,

Gita
董晉瑋(Andy.Dong) 25 Reputation points

2023-05-17T06:19:29.4133333+00:00

HI @GitaraniSharma-MSFT

I have followed the steps you provided.

on portal.
The VPN gateway has not been deleted and the error still persists.
Luca Lionetti 3,311 Reputation points

2023-05-17T07:28:58+00:00

Hello @董晉瑋(Andy.Dong)

Have you checked that there are no connections configured?

You can also try to use the -force command

Remove-AzVirtualNetworkGateway -Name myGateway -ResourceGroupName myRG -force

Hope this helps

Cheers

Luca
GitaraniSharma-MSFT 50,186 Reputation points Microsoft Employee Moderator

2023-05-17T07:55:15.3666667+00:00

@董晉瑋(Andy.Dong) , thank you for the update.

As mentioned in my previous comment if you are unable to recover/delete the VPN gateway following the advised steps, then you need to open a support case to get it removed from the backend. So, if you have a support plan, I request you file a support ticket, else please do let us know, we will try and help you get a one-time free technical support.

In case you need help with a one-time free technical support, I would request you to send an email with subject line "ATTN gishar | Cannot delete a Virtual Network Gateway" to AzCommunity[at]Microsoft[dot]com with the following details and I will follow-up with you.

Reference this Q&A thread

Your Azure Subscription ID

Note: Do not share any PII data as a public comment.

We will post a summarized answer once the issue is resolved.

Regards,

Gita
Luca Lionetti 3,311 Reputation points

2023-05-17T08:00:01.4733333+00:00

you can also try this commands in powershell

$GW=get-Azvirtualnetworkgateway -Name "GW1" -ResourceGroupName "RG1"

then check for any connections

get-Azvirtualnetworkgatewayconnection -ResourceGroupName "RG1" | where-object {$_.VirtualNetworkGateway1.Id -eq $GW.Id}

$Conns=get-Azvirtualnetworkgatewayconnection -ResourceGroupName "RG1" | where-object {$_.VirtualNetworkGateway1.Id -eq $GW.Id}

and then delete all connections

$Conns | ForEach-Object {Remove-AzVirtualNetworkGatewayConnection -Name $.name -ResourceGroupName $.ResourceGroupName}
董晉瑋(Andy.Dong) 25 Reputation points

2023-05-17T08:08:47.46+00:00

HI @Luca Lionetti

Thank you for your response.

Yes, I have confirmed that there are no connections on the VPN gateway.

I have also tried using PowerShell to delete the VPN gateway, but I still encountered an error, just like the screenshot I posted in the beginning of the thread.
Bas Pruijn 956 Reputation points

2023-05-19T09:37:58.9766667+00:00

Sometimes it really helps to delete the resource group the resource is in. This however is cumbersome if some other resources reside in the same resource group and you do not want to delete them. A potential work-around (depending on your situation) is to either move the resources you want to keep, or the resources you want to remove to a newly created resource group and then remove the resource group containing the misbehaving resource.

Futhermore, you can try removing it via PowerShell and add the Force directive to your remove command.(https://learn.microsoft.com/en-us/powershell/module/az.network/remove-azvirtualnetworkgateway?view=azps-9.7.1)

Answer 1

@董晉瑋(Andy.Dong) ,

I understand that you were unable to delete your Virtual Network gateway. In the portal, the task to delete was failing with following error message: "The resource operation completed with terminal provisioning state 'Failed'" and even PowerShell commands were not working.

I suggested you try the below provided steps:

Open a web browser and navigate to https://resources.azure.com
Log-in to the appropriate Azure account.
In the blade on the left side of the browser, expand subscriptions, then expand the desired subscription name.
In the blade on the left side of the browser, expand resource groups.
Under resource groups, expand the proper Resource Group Name "eLife".
Under the Resource Group "eLife", expand providers.
Under providers, expand Microsoft.Network.
Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway.
Near the top of the content window of the browser, select the Read/Write push button.
Select the Data (GET, PUT) tab and click on GET.
Then click on Edit but do not make any changes.
Finally click on PUT.
This should help the VPN gateway to recover from the failed state.

Post the above step:

Under Microsoft.Network, expand Connections.
Under Connections, check and see if you are able to find any connections.

If you find a connection:

Select the Connection name and near the top of the content window of the browser, select the Read/Write push button.
Select the Actions (POST, DELETE) tab and click on Delete.
Once this connection is deleted, you can retry to delete the gateway.

If you do not find a connection:

Under Microsoft.Network, expand virtualNetworkGateways, select the "elife-vpngateway" gateway and Select the Actions(POST, DELETE) tab and click on Delete.
Confirm that the gateway is deleted.

You followed the above steps, but VPN gateway was not deleted, and the error still persisted. So, we created a support request to get it removed from the backend.

The support engineer engaged the backend team and they have fixed the backend issue which was causing the VPN gateway deletion failure.

So, I would request you try deleting the VPN gateway now.

Kindly let us know if the above helps or you need further assistance on this issue.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Share via

Cannot delete a Virtual Network Gateway

0 additional answers

Your answer