Bug ID 2301441: Route metric is increased for full-tunnel mode when Allow Local Subnet is enabled

Last Modified: Sep 30, 2026

Affected Product(s):
APM-Clients TMOS(all modules)

Known Affected Versions:
7.2.5.3, 7.2.6, 7.2.6.1, 7.2.6.2, 7.2.7

Fixed In:
7.2.7.1

Opened: May 25, 2026

Severity: 3-Major

Symptoms

BIG-IP APM Edge Client connects in full-tunnel VPN mode with "Allow Local Subnet" enabled, the route metrics are increased. Upon VPN disconnection, the client fails to restore/revert the original route metric values.

Impact

Causes communication/connectivity errors for end users after they disconnect from VPN, as traffic may be misrouted due to elevated metrics.

Conditions

Full-tunnel VPN mode AND "Allow Local Subnet" enabled

Workaround

None

Fix Information

Full-tunnel VPN with "Allow Local Subnet" enabled. Verified route metrics across 1 VPN connect/disconnect cycle using `route print`: All managed routes restored to exact original metrics (?=0). The multicast 224.0.0.0/4 on IF 11 shows +1 drift — this is Windows OS behavior (OS re-creates this route independently; not managed by EdgeClient). It does not accumulate any more.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips