Bug ID 618657: Bogus ICMP unreachable messages in PEM with ipother profile in use

Last Modified: Sep 13, 2023

Affected Product(s):
BIG-IP PEM(all modules)

Known Affected Versions:
11.5.4, 11.5.5, 11.5.6, 11.5.7, 11.5.8, 11.5.9, 11.5.10, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1

Fixed In:
13.0.0, 12.1.2

Opened: Sep 24, 2016

Severity: 3-Major

Symptoms

The ipother virtual server will send bogus ICMP unreachable messages caused by incorrect error handling in the PEM filter.

Impact

Unnecessary ICMP traffic

Conditions

A VS with ipother profile configured together with the PEM profile. In the field defect the additional piece needed was the missing classification, but this is due to code ordering, so in non-fixed versions this can also happen with the classification profile present.

Workaround

None

Fix Information

Fixed an issue related to unnecessary ICMP traffic in the PEM filter.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips