Last Modified: Aug 25, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
21.1.0, 21.1.0.1
Opened: Jun 30, 2026 Severity: 3-Major
After running the "tmsh delete ltm snat all" command, the snat-translation object, which was automatically created while creating the snat object, may not be removed and becomes orphaned. With the orphaned snat-translation object, a couple of problems can occur - Orphaned snat-translation object cannot be deleted. An error message "01070321:3: Snat translation address /Common/x.x.x.x is still referenced by a snat pool." is returned. # tmsh delete ltm snat-translation 10.1.1.1 01070321:3: Snat translation address /Common/10.1.1.1 is still referenced by a snat pool. # - New snat-translation object cannot be created on either CLI or GUI. An error message "01070712:3: Invalid primary key on trans_addr object - path is empty." is returned. # tmsh create ltm snat-translation 10.2.2.1 { address 10.2.2.1 traffic-group traffic-group-1 } 01070712:3: Invalid primary key on trans_addr object - path is empty. # - New snat object cannot be created on either CLI or GUI. An error message "01070734:3: Configuration error: Invalid primary key on trans_addr object () - not a full path 2." is returned. # tmsh create ltm snat my_snat2 origins add { 10.4.4.1 } translation 10.5.5.1 01070734:3: Configuration error: Invalid primary key on trans_addr object () - not a full path 2. #
- Cannot delete orphaned snat-translation object. - Cannot create new snat object or snat-translation object
- Executed "tmsh delete ltm snat all" command
Avoid running "delete ltm snat all" TMSH command. Instead, delete snat object on GUI. Or alternatively, avoid using "all" keyword when you delete snat object on CLI (i.e., delete each snat object by "delete ltm snat [snat-object-name]" command) If you have already had orphaned snat-translation object and have difficulty in creating new snat/snat-translation object, follow K13030 and refresh mcpdb. After reboot, you can manually delete the orphaned snat-translation object without using "all" TMSH command option # touch /service/mcpd/forceload # reboot # tmsh delete ltm snat-translation 10.1.1.1 ; tmsh save sys config
None