Bug ID 567457: TMM may crash when changing the IKE peer config.

Last Modified: May 29, 2024

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.1 HF10, 11.5.1 HF11, 11.5.2 HF1, 11.5.3 HF1, 11.5.3 HF2, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4

Fixed In:
13.0.0, 12.1.2 HF1, 11.6.1 HF2

Opened: Jan 13, 2016

Severity: 2-Critical

Related Article: K27241749

Symptoms

TMM might crash when changing the IKE peer config. It can happen with either IKEv1 or IKEv2 (TMM config crash).

Impact

Traffic disrupted while tmm restarts.

Conditions

This occurs when making changes to IPsec tunnels that causes the configuration to become invalid. For example, changing ISAKMP phase1 from SHA-1 to MD5 results in an invalid configuration. Note: This occurs in the GUI only. The tmsh 'create' command does not cause this core.

Workaround

You can use tmsh to make the affected configuration changes... this occurs in the GUI only. The tmsh 'create' command does not cause this core.

Fix Information

TMM no longer crashes when changing the IKEv1 or IKEv2 peer config, even if the changes are not valid for the configuration.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips