Last Modified: Jul 12, 2023
Affected Product(s):
BIG-IP CGN
Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1
Fixed In:
14.0.0
Opened: Oct 28, 2017 Severity: 3-Major
When redirecting the traffic by using iRule 'virtual <virtual_server>' on a PBA or DNAT LSN pool associated virtual server, the system resets the connection and logs errors similar to the following: err tmm2[19158]: 01670024:3: Unsupported DAG mode for LSN pool(/Common/session1_pool) mode PBA on interface _loopback err tmm2[19158]: 01670024:3: Unsupported DAG mode for LSN pool(/Common/dnat_pool) mode DNAT on interface _loopback This occurs because using an iRule to change virtual servers prevents correct DAG detection for PBA and DNAT modes.
Connections fail using this iRule.
-- LSN pool is configured in either PBA or DNAT mode. -- An iRule redirects traffic to a different virtual server.
To work around this issue, configure the lsn-pools with NAPT mode.
LSN can now detect the correct DAG mode after the virtual server is set using an iRule, so this issue no longer occurs.