How can I delete residual Implicit Rules broken links?

[RedNectar]

Hi experts,

I have a large number of residual broken links that I can locate via Admin > AAA > Security > RBAC Rules > Implicit Rules. They link non-existant L2Ext and L3Ext Domains with non-existant Security Domains, as shown below.

Now my problem is that I can not delete these left-over implicit rules - as you can see below, there is NO actions menu, and the right-click menu does not give a delete option.

So experts, how do I delete these broken-link entries? 

[6askorobogatov]

Just guessing here.. i never did  that for broken links. 

You can try to  save object as JSON , add  "status" : " deleted"  and post it. 

[Claudia de Luna]

I’m afraid I tried that and it didn’t work.

[Marcel Zehnder]

Hi Chris

Have you tried via a DELETE API call using Postman or icurl?

First find the DNs using moquery:

moquery -c aaaIRbacRule | grep dn | sort 

Then try to delete the DN:

icurl -g -X DELETE 'http://localhost:7777/api/mo/<DN>.json'

Marcel

[RedNectar]

Hi @Marcel Zehnder ,

I had tried something similar in python/Cobra, but had never thought of using icurl.

But alas, like my python script, it appears to work but the dn does not disappear, as you can see via my comments in my session below

apic1# moquery -c aaaIRbacRule | grep dn | grep T9:MappedVLANs
dn           : uni/rbacdb/irule-[uni/l2dom-T9:MappedVLANs_ExtL2Dom]-dom-T9_SecDom
#GREAT - it found the dn I want - now I'll try an delete it

apic1# icurl -g -X DELETE 'http://localhost:7777/api/mo/uni/rbacdb/irule-[uni/l2dom-T9:MappedVLANs_ExtL2Dom]-dom-T9_SecDom.json'
{"totalCount":"1","imdata":[]}
#FANTASIC - it seems to have worked!  Better check that it has gone

apic1# moquery -c aaaIRbacRule | grep dn | grep T9:MappedVLANs
dn           : uni/rbacdb/irule-[uni/l2dom-T9:MappedVLANs_ExtL2Dom]-dom-T9_SecDom
#DARN - It is still there :(

So there must be some other secret way to achive this that I can't find.

Thanks also to @6askorobogatov and @Claudia de Luna for working on this with me.

[Marcel Zehnder]

Hi Chris 

Might be some special object which could only be deleted via the testapi. I would suggest to open a TAC case.

Marcel