Last Modified: Jun 18, 2024
Affected Product(s):
BIG-IP APM
Opened: Apr 17, 2024 Severity: 3-Major
You are able to create an address-space APM resource without specifying the subnet. This results in an address space that has a /32 subnet mask.
When you view the properties in TMSH and the GUI, the address is displayed, but without a netmask: (tmos)# list apm resource address-space test_space all-properties apm resource address-space test_space { app-service none cfg-uri none description none discovery-interval 0 dns none ipv4 { 10.10.10.10 } ipv6 none last-discovery-time 1969-12-31:16:00:00 max-response-size 131072 partition Common trusted-ca-bundle none type custom }
Create a new address space (IPv4 or IPv6) either via CLI or TMUI (Access >> Connectivity/VPN >> Network Access (VPN) >> Address Space) and add an address without specifying the subnet. (tmos)# create apm resource address-space test_space type custom ipv4 add { 10.10.10.10 }
None
None