Last Modified: Oct 17, 2023
Affected Product(s):
BIG-IP LTM
Known Affected Versions:
12.1.0, 12.1.1, 12.1.2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1
Fixed In:
13.1.0, 12.1.3.2
Opened: Feb 16, 2017 Severity: 3-Major Related Article:
K74371937
Routes obtained from dynamic routing (BGP, etc.) can replace existing management route for the admin IP address, making the BIG-IP lose its management route. Static routes created via TMSH can replace management route.
Losing the management network route, and potential loss of access to the BIG-IP via the management network.
Using TMSH to create "net route" that matches management network, or dynamic routing accepts a route that matches the management network.
Don't accept route updates for the management network. Don't create static routes for the management network.
Management network admin IP address is now protected from being overwritten.