Can't delete some policies

[dodgerfan78]

Please see attached picture.

I am not sure how these showed up but I am unable to remove them (no delete option). They exist in other sections too, they all have __ui__po in the name. The rest of the name looks like the name from some other policies in the APIC.

[Tomas de Leon · Accepted solution]

CSCux50369 - Cannot delete policies starting with "__ui_"

Symptom:
Unable to delete policies created in Basic Mode GUI or policies using the naming convention from Basic Mode GUI (starting with __ui_), for example policies created using the NX-OS Style CLI

Conditions:
Hit when looking at something in Advanced Mode GUI that was created by the backend when configuring policy in Basic Mode GUI or created using the NX-OS Style CLI

Workaround:
These policies, having been internally created using the basic GUI, should not be deleted/modified directly since the User wouldn't know the effect of such operations. Recommended to delete these policies from the basic GUI.

If the policy was created from the NX-OS Style CLI, issue the corresponding command that created the object with "no" in front of it to delete the associated objects that were created by issuing the original command.

Options to manually delete the objects, but make sure you understand the implications of deleting the object before doing so:
1. Delete using REST API POST
2. Delete using modelete; navigate to the appropriate folder containing the object, then issue an modelete of that object, followed by moconfig commit

I hope this helps and thank you for using the Cisco Support Community for ACI.

T.

[dodgerfan78]

Thanks Tomas, I never used the Basic Mode CLI but I did use the NXOS CLI, but I never actually created these. I wonder if they were placeholders as I was referencing policies that did not exist yet...strange...

[Robert Burns]

Any policy with __ui__ in the name was "system generated".  This not only includes Basic UI created policies, but also CLI ones.

Robert

[dodgerfan78]

Here is my theory. I was using the CLI to copy an APIC config to another. During that copying a bunch of referenced policies did not actually exist yet. The error messages told me to create these or there would be errors. Eventually they were created, but I wonder of this is related and these are somehow placeholders? Really ugly looking in GUI!

[dodgerfan78]

This configuration automatically created an AEP for me since I did not have one. The AEP was called __ui_pg_PG-NAS. The AEP was then applied to the PG-NAS port group.

apic1(config)#   vlan-domain BM-DOMAIN dynamic type phys

apic1(config-vlan)# vlan-pool VLP-SIMP-Dynamic

apic1(config-vlan)# vlan 3590 dynamic

apic1(config-vlan)#     vlan 3593-3599 dynamic

apic1(config-vlan)#

apic1(config-vlan)# exit

apic1(config)#   template policy-group PG-NAS

apic1(config-pol-grp-if)#    vlan-domain member BM-DOMAIN type phys

apic1(config-pol-grp-if)#

[YanL]

I added a physical domain to infra/app-ave-ctrl/epg-ave-ctrl for troubleshooting and the system won't let me delete it. 

I tried deleting the actual physical domain object from the Fabric Access Policies, then tried in the infra tenant: no go.

I tried Postman: no go

I tried modelete: no go

admin@LAB1ASW1148:epg-ave-ctrl> ls
mo rsbd rscustQosPol rsdomAtt-[uni--phys-L2OUT_PHYS_DOMAIN] summary
mo.orig rsbd.link rscustQosPol.link rsdomAtt-[uni--phys-L2OUT_PHYS_DOMAIN].link
admin.yan.lafrance@LAB1ASW1148:epg-ave-ctrl> modelete rsdomAtt-[uni--phys-L2OUT_PHYS_DOMAIN].link
This command is being deprecated on APIC controller, please use NXOS-style equivalent command
admin@LAB1ASW1148:epg-ave-ctrl> moconfig commit
This command is being deprecated on APIC controller, please use NXOS-style equivalent command
Error: Validation failed: Cannot be deleted when an associated domain exists Dn0=uni/tn-infra/ap-ave-ctrl/epg-ave-ctrl/rsdomAtt-[uni/phys-L2OUT_PHYS_DOMAIN],
Commit failed with errors.