Bug ID 442625: TMM crash, requested unknown already exists errors when creating IPsec AH traffic-selector

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.4.0, 11.4.1, 11.5.0, 11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10

Fixed In:
11.6.0, 11.4.1 HF9

Opened: Jan 10, 2014

Severity: 3-Major

Related Article: K16678

Symptoms

An IPsec Authentication Header (AH) tunnel may cause tmm to crash when a TCP retransmit occurs over the tunnel.

Impact

Traffic disrupted while tmm restarts.

Conditions

A tmm core and restart occurs when a TCP virtual server retransmits over an IPsec AH tunnel.

Workaround

If AH is required, there is no workaround. For similar functionality, consider ESP with null encryption.

Fix Information

Fixed rare TMM crash when TCP retransmit is sent over an IPsec AH mode tunnel.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips