Bug ID 1292273: SNAT command in iRule fails to convert ICMPv6 requests to ICMPv4

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4

Opened: Apr 24, 2023

Severity: 3-Major

Symptoms

When the SNAT command is used in an iRule, ICMPv6 echo requests cannot be translated to an ICMP echo requests when nat64 is enabled on the virtual server. The snat pool in server side contains the IPV4 addresses.

Impact

NAT64 translation does not occur which leads to traffic failure.

Conditions

-- Enable nat64 on a virtual server -- Configure a SNAT pool. -- Use "snat" command in an iRule.

Workaround

Do not use "snat" for selecting a pool member in an iRule.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips