Last Modified: Mar 13, 2026
Affected Product(s):
BIG-IP F5OS, TMOS
Known Affected Versions:
17.1.1.3, 17.1.1.4, 17.1.2, 17.1.2.1, 17.1.2.2, 17.1.3, 17.1.3.1, 17.5.0, 17.5.1, 17.5.1.2, 17.5.1.3, 17.5.1.4, 17.5.1.5, 21.0.0, 21.0.0.1
Opened: Oct 03, 2024 Severity: 3-Major
Masquerade Mac is not removed when F5OS is rebooted. It can be observed using the 'show fdb' command in confd This can cause the standby tenant to be unable to ping the floating SelfIP address on the active device, but the active device can ping the standby device.
Active and Standby act as if they are the owners of Floating MAC and IP.
- An HA pair of tenants is used - Tenants running on a VELOS chassis, or on r5000-series, r10000-series, or r12000-series appliances - A traffic group uses a masquerade mac - The Active tenant is rebooted
The masquerade mac's fdb can be manually deleted using the F5OS CLI. From the standby F5OS system CLI: config no fdb mac-table entries entry <mac masquerade address> commit
None