Bug ID 1072209: Packets are dropped on VELOS when a masquerade MAC is on a shared VLAN

Last Modified: Sep 14, 2022

Bug Tracker

Affected Product:  See more info
F5OS Velos(all modules)

Fixed In:
1.5.0

Opened: Jan 10, 2022
Severity: 2-Critical

Symptoms

On the VELOS platform, any packets destined to a masquerade MAC address are dropped when the masquerade MAC is located on a shared VLAN (a VLAN shared between multiple F5OS tenants). On rSeries hardware platforms, all traffic for this MAC is first handled by the software-rebroadcaster and is replicated to all tenants sharing that VLAN.

Impact

Connectivity issues.

Conditions

-- A masquerade MAC is configured on a shared VLAN. -- Traffic to the MAC address is initiated, that is, ping a floating self-IP. -- The packets are dropped on ingress.

Workaround

Configure a static FDB entry at the partition level.

Fix Information

Packets are no longer dropped when a masquerade MAC is on a shared VLAN.

Behavior Change