Bug ID 479660: tmm crash in ipsec when ipsec-policy and ike-peer do not match.

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.1 HF2

Opened: Sep 16, 2014

Severity: 3-Major

Symptoms

While making changes to ipsec, tmm can crash.

Impact

Traffic disrupted while tmm restarts.

Conditions

This can occur when ipsec-policy and ike-peer IP addresses do not match.

Workaround

Ensure that the ike-peer "tunnel-remote-address" and ipsec-policy "remote-address" are the same.

Fix Information

tmm no longer crashes in ipsec when ipsec-policy and ike-peer do not match.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips