Bug ID 756401: IKEv2 debug logging often omits SPI values that would identify the SAs involved

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4

Fixed In:
15.1.0

Opened: Jan 24, 2019

Severity: 4-Minor

Symptoms

Debug logging for IPsec often has no clear identification of which SA was involved during some logged events.

Impact

You might have trouble analyzing what happened from logs when the SA involved in an event is not identified.

Conditions

When you examine logs in either /var/log/tmm or /var/log/ipsec.log to debug IPsec activity.

Workaround

None.

Fix Information

More logged lines now include SPI values to identify the SA involved, especially in error cases.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips