Bug ID 1434789: Address List containing IP addresses with route domain IDs cannot be assigned as Default Allowedlist in DoS profiles

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP ASM(all modules)

Opened: Dec 12, 2023

Severity: 3-Major

Symptoms

Modifying DoS profile with default allowed list option throws error message on TMSH as well as on GUI.

Impact

Unable to assign allowlist IP address to DoS profile.

Conditions

Create allowlist IP address list like below, security firewall address-list test-whtlst { addresses { 8.8.8.8 { } 10.10.10.0/24 { } 192.168.0.1%2/32 { } } } assign this whitelist to dos profile.

Workaround

Use same allowlist as HTTP allowlist option. Following is an example: modify security dos profile test-dos-profile http-whitelist test-whtlst

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips