Bug ID 675236: 'Require consistent IP address' does not apply to some management GUI menu items

Last Modified: Oct 10, 2018

Bug Tracker

Affected Product:  See more info
BIG-IP APM, ASM, AVR(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1

Fixed In:
13.1.0

Opened: Jul 23, 2017
Severity: 3-Major
Related AskF5 Article:
K03293523

Symptoms

The configuration setting 'System :: Preferences :: Require A Consistent Inbound IP For the Entire Web Session' ('sys http auth-pam-validate-ip' in tmsh) does not apply to some menu items, and acts as if the setting is enabled (that a consistent IP address is required) regardless of the BIG-IP configuration.

Impact

The 'sys http auth-pam-validate-ip' setting is ineffective on some menu items. These include ASM, AVR, and APM menu items.

Conditions

BIG-IP administrator accesses the configuration utility from more than one source IP address, using the same session cookie.

Workaround

Ensure the source IP address used when accessing the configuration utility does not change mid-session. This could happen if your management session is being load balanced across multiple HTTP proxies, for example.

Fix Information

None

Behavior Change