Bug ID 645723: Dynamic routing update can delete admin ip route from the kernel

Last Modified: Dec 14, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0, 12.1.3.2

Opened: Feb 16, 2017
Severity: 3-Major
Related AskF5 Article:
K74371937

Symptoms

Routes obtained from dynamic routing (BGP, etc.) can replace existing management route for the admin IP address, making the BIG-IP lose its management route. Static routes created via TMSH can replace management route.

Impact

Losing the management network route, and potential loss of access to the BIG-IP via the management network.

Conditions

Using TMSH to create "net route" that matches management network, or dynamic routing accepts a route that matches the management network.

Workaround

Don't accept route updates for the management network. Don't create static routes for the management network.

Fix Information

Management network admin IP address is now protected from being overwritten.

Behavior Change