Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
12.1.0
Opened: Jul 06, 2015 Severity: 3-Major Related Article:
K48180111
Bigstart restart on secondary blades in chassis causes IPsec failures. The intended traffic is not secured.
Racoon on the primary blade does not comes up. The intended traffic is not secured. IPsec tunnels do not get established. IKE negotiations fail.
1. Chassis with at least two blades is required. 2. Once the primary blade and secondary blade comes up. 3. Issue bigstart restart on the secondary blade. 4. Observe is sometimes stuck racoon on the primary blade
Run the following command: on the primary blade: bigstart restart tmipsecd.
Racoon on the primary blade now comes up as expected after bigstart restart on the secondary blade.