Bug ID 806825: Align the behavior of NAT44 and NAT64 when translate-address is disabled under Virtual Configuration with LTM Pool and LSN Pool

Last Modified: Oct 16, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4

Fixed In:
15.1.0, 14.1.2.7

Opened: Jul 17, 2019

Severity: 3-Major

Symptoms

Configure translate-address disabled under Virtual with LTM pool configured. In the NAT44 case, LTM pool is used as next-hop and packets are L2 forwarded to LTM pool members without destination address translated. In NAT64 case, packets are dropped if there is no route available to reach the IPv4 destinations (derived from original IPv6 destination). Packets are not L2 forwarded to LTM pool members.

Impact

If there is no route available to reach the destination, NAT64 packets are dropped.

Conditions

-- Virtual server with LTM pool configured. -- CGNAT LSN pool configured. -- Translate-address disabled.

Workaround

Configure default gateways/routes to reach the IPv4 destination in NAT64 case.

Fix Information

Aligned the behavior of NAT44 and NAT64 when translate-address is disabled under Virtual Configuration with LTM Pool and LSN Pool. Use LTM pool as next hop for L2 forwarding the NAT64 packets when translate-address is disabled.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips