Last Modified: Sep 13, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
11.6.1, 11.6.2, 12.0.0, 12.0.0 HF1, 12.1.0 HF1, 12.0.0 HF2, 12.1.0 HF2, 12.0.0 HF3, 12.0.0 HF4, 12.1.1 HF1, 12.1.1 HF2, 12.1.2 HF1, 12.1.2 HF2, 12.1.0, 12.1.1, 12.1.2, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3
Fixed In:
13.1.0, 13.0.1, 12.1.3, 11.6.3
Opened: Feb 08, 2017 Severity: 3-Major Related Article:
K27629542
An LTM policy using a rule that attempts to match based on a list of IP addresses may fail if more than one IP address is used.
The action configured with the match may not be taken.
LTM policy rule with a 'tcp match address' statement that attempts to match against more than one IP address.
Use one of the following workarounds: - Use a subnet instead of single IP addresses. - Use a datagroup with the list of IP addresses to match. * Datagroup option available beginning in v13.0.0.
The BIG-IP system now correctly matches several IP addresses in LTM policies.