Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2
Fixed In:
16.0.0, 15.1.2.1, 14.1.4.4
Opened: Nov 05, 2019 Severity: 2-Critical
Translucent vlan-groups may set the locally-unique bit in a destination MAC address when sending traffic to a pool member/client.
Traffic handled by translucent vlan-groups may not work properly.
On versions earlier than 15.0.0: - Translucent vlan-group is in use. On v15.0.0 and later: -- Translucent vlan-group is in use. -- The connection.vgl2transparent db variable is enabled.
On versions earlier than 15.0.0, there is no workaround. -- On version 15.0.0 and later, you can disable the connection.vgl2transparent db variable to mitigate the problem: tmsh modify sys db connection.vgl2transparent value disable Note: connection.vgl2transparent is disabled by default.
None