Bug ID 439653: Apply LTM policy to VIP gives 'Execution of action %s failed, error ERR_UNKNOWN'

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.2 HF1, 11.4.0, 11.4.1

Fixed In:
11.6.0, 11.5.1 HF5, 11.4.1 HF6

Opened: Dec 04, 2013

Severity: 3-Major

Related Article: K15631

Symptoms

When applying a Local Traffic Policy to a virtual server that controls ASM, requests begin to be dropped, and for each dropped request, the following is logged to /var/log/ltm: 'Mar 10 15:03:53 slot1/viprion err tmm[8432]: 016e0002:3: Execution of action 'asm enable policy=/Common/ltmpolicy_asm_general rule=catchall_asm action-id=0 policy=/Common/general' failed, error ERR_UNKNOWN'.

Impact

This causes errors to be written to the logs whenever requests pass through a virtual server.

Conditions

Occurs when a virtual server does not have a particular CPM policy on it, and long-lived connections are passing traffic through it. When the administrator applies a policy to a virtual server, that policy change also gets applied to any open connections. If administrator then removes the policy, then it is only partially applied to existing open connections, resulting in errors in the logs such as 'Execution of action %s failed, error ERR_UNKNOWN'.

Workaround

None. However the problem mitigates itself over time, as long-lived connections terminate and reconnect. New connections will use the latest policy settings and will not exhibit the problem.

Fix Information

Long-lived connections consistently use policy settings from the beginning of the connection, and for the lifetime of that connection, regardless of any virtual server and policy configuration changes that occur in the interim.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips