Bug ID 1021737: NAT policy rules are matched regardless of route domains

Last Modified: Apr 17, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4

Opened: May 26, 2021

Severity: 3-Major

Symptoms

Only the first policy rule is processed, as route domain indices not respected.

Impact

Unable to segregate client traffic, as route domain indices are not respected in NAT policy rules

Conditions

-- Two custom route domains, each with a virtual server configured in them -- A policy with two rules (one per route domain ID) is assigned to both the virtual servers

Workaround

Use a separate policy on the wildcard virtual server for each route domain.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips