Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP AFM, CGN
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3
Fixed In:
14.1.0, 14.0.0.5, 13.1.1.4
Opened: Jul 09, 2018 Severity: 3-Major
FW NAT / CGNAT modules query the subscriber ID using IPv6 address. If the query is done using the IPv6 mask, under some circumstances the query fails.
Logs contain UNKNOWN subscriber-id.
The network is using an IPv6 mask other than 128. Subscribers are created using the masked IP address as the key. If NAT module uses the complete IP address as the query key, the subscriber will not be found.
There is no workaround at this time.
Subscriber ID queries using IPv6 address are now returning the subscriber-id.