Bug ID 486512: audit_forwarder sending invalid NAS IP Address attributes

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
10.2.4, 11.0.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.1.0, 11.2.0, 11.2.1, 11.3.0, 11.4.0, 11.4.1, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.0 HF5, 11.5.4 HF2, 11.4.1 HF9, 10.2.4 HF12

Opened: Oct 23, 2014

Severity: 3-Major

Related Article: K16979

Symptoms

Forwarded auditing messages contain the incorrect nas-ip-address attribute. It should be the local IP of the box. Instead nas-ip-address is another, random IP address.

Impact

Cannot pass certification because config auditing is not working as expected (invalid NAS IP Address).

Conditions

This seems to work fine when the BIG-IP is a virtual machine.The issue reproduces only on the actual hardware.

Workaround

None.

Fix Information

Forwarded auditing messages now contain the correct nas-ip-address attribute, so config auditing is now working as expected.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips