Last Modified: Aug 19, 2026
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
11.6.1, 11.6.1 hf1, 11.6.1 hf2, 11.6.2, 11.6.2 hf1, 12.0.0, 12.0.0 hf1, 12.0.0 hf2, 12.0.0 hf3, 12.0.0 hf4, 12.1.0, 12.1.0 hf1, 12.1.0 hf2, 12.1.1, 12.1.1 hf1, 12.1.1 hf2, 12.1.2, 12.1.2 hf1, 12.1.2 hf2, 13.0.0, 13.0.0 hf1, 13.0.0 hf2, 13.0.0 hf3
Fixed In:
13.1.0, 13.0.1, 12.1.3, 11.6.3
Opened: Feb 08, 2017 Severity: 3-Major Related Article:
K27629542
An LTM policy using a rule that attempts to match based on a list of IP addresses may fail if more than one IP address is used.
The action configured with the match may not be taken.
LTM policy rule with a 'tcp match address' statement that attempts to match against more than one IP address.
Use one of the following workarounds: - Use a subnet instead of single IP addresses. - Use a datagroup with the list of IP addresses to match. * Datagroup option available beginning in v13.0.0.
The BIG-IP system now correctly matches several IP addresses in LTM policies.