Bug ID 552385: Virtual servers using an SSL profile and two UDP profiles may not be accepted

Last Modified: Dec 10, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.0, 11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2

Fixed In:
11.5.4

Opened: Oct 13, 2015
Severity: 3-Major

Symptoms

Error message: 01070711:3: Found disallowed profile: Not Profile profile_clientssl or 01070711:3: Found disallowed profile: Not Profile profile_serverssl

Impact

When using either a client-ssl profile or a server-ssl profile, depending on the sort order of the UDP profiles, the configuration may not be accepted. When using both a client-ssl profile and a server-ssl profile, the configuration is not accepted.

Conditions

Create a virtual server with a client-ssl profile and/or a server-ssl profile and two different UDP profiles (one on the server side and one on the client side).

Workaround

When using either a client-ssl profile or a server-ssl profile, either use a common UDP profile for both client and server side or try renaming one of the UDP profiles to alter the sort order. When using both a client-ssl profile and a server-ssl profile, try using one UDP profile for both the client and server side.

Fix Information

Virtual servers that utilize an SSL profile and a combination of UDP profiles are now accepted.

Behavior Change