Bug ID 421495: IPv6 router advertisments need to be squelched when DAD conflicts are detected

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.3.0, 11.4.0, 11.4.1

Fixed In:
11.5.0, 11.4.1 HF2, 11.3.0 HF8, 11.3.0 HF8

Opened: May 20, 2013

Severity: 3-Major

Symptoms

In IPv6 strict compliance mode all IPv6 operations needs to be stopped when duplicate IPv6 addresses are detected. Because of this, BIG-IP may continue to send out configured route advertisements.

Impact

BIG-IP may continue using configured IPv6 addresses and send out RA even if DAD is detected.

Conditions

This is applicable only to IPv6 strict compliance. Without it BIG-IP does not perform duplicate address detection (DAD) and always configures addresses.

Workaround

Avoid duplicate address situations. With properly configured networks, this is no issue.

Fix Information

Duplicate address detection now behaves according to IPv6 RFC.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips