Bug ID 560909: LTM policy is unable to disable SNAT

Last Modified: Oct 01, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 11.6.3.2, 12.0.0, 12.0.0 HF1, 12.0.0 HF2, 12.0.0 HF3, 12.0.0 HF4

Fixed In:
13.0.0, 12.1.0, 11.6.3.3

Opened: Dec 03, 2015
Severity: 4-Minor

Symptoms

The SNAT feature of an LTM policy used two keywords, 'automap' and 'none', to configure SNAT as automap or disabled, respectively. It turns out that the keyword 'none' has special meaning in tmsh, and is treated as an invalid value.

Impact

Cannot disable SNAT using LTM policy.

Conditions

-- LTM policy with automap action. -- Attempt to disable SNAT from either GUI or tmsh using the value 'none'.

Workaround

Remove the SNAT action from LTM policy, and use an iRule instead.

Fix Information

LTM policy can now successfully disable SNAT.

Behavior Change