Bug ID 568672: Down IPsec traffic-selector shows as 'up' in 'show net ipsec traffic-selector' and in GUI

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
11.5.1, 11.5.2, 11.5.3, 11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 11.6.0, 11.6.1, 11.6.2, 11.6.3, 11.6.3.1, 11.6.3.2, 11.6.3.3, 11.6.3.4, 11.6.4, 11.6.5, 11.6.5.1, 11.6.5.2, 11.6.5.3, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1

Fixed In:
13.0.0, 12.1.2

Opened: Jan 19, 2016

Severity: 3-Major

Related Article: K27931444

Symptoms

After an SA goes down, 'show net ipsec traffic-selector' may report that the traffic-selector is up. The Web UI also reports up.

Impact

Confusion on the true state of the tunnel.

Conditions

This occurs if a tunnel times out and goes to the down state.

Workaround

None needed.

Fix Information

Now, when a tunnel times out and goes to the down state, the state is shown correctly.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips