Last Modified: Oct 16, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
11.6.3, 11.6.3.1, 11.6.3.2, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2
Fixed In:
13.0.0, 12.1.0, 11.6.3.3
Opened: Dec 03, 2015 Severity: 4-Minor
The SNAT feature of an LTM policy used two keywords, 'automap' and 'none', to configure SNAT as automap or disabled, respectively. It turns out that the keyword 'none' has special meaning in tmsh, and is treated as an invalid value.
Cannot disable SNAT using LTM policy.
-- LTM policy with automap action. -- Attempt to disable SNAT from either GUI or tmsh using the value 'none'.
Remove the SNAT action from LTM policy, and use an iRule instead.
LTM policy can now successfully disable SNAT.