Bug ID 504396: When a virtual's ARP or ICMP is disabled, the wrong mac address is used

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF1, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.1, 11.5.2, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.1.0 HF1, 12.1.0 HF2, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2

Fixed In:
12.0.0, 11.6.1 HF1, 11.5.3

Opened: Feb 03, 2015

Severity: 3-Major

Related Article: K42393402

Symptoms

When using tmsh to modify the icmp_enabled or arp_enabled property of a virtual address object from true to false, tmm does not reset the internal state properly. This results in a tmm using the VLAN's true MAC as the source MAC instead of the traffic group's MAC masquerade address.

Impact

Packets may be dropped by switches or routing tables improperly updated.

Conditions

Using MAC masquerading in a high availability (HA) traffic group.

Workaround

None.

Fix Information

When a virtual server's ARP or ICMP is disabled, the correct MAC address is now used.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips