Bug ID 693739: VPN cannot be established on macOS High Sierra 10.13.1 if full tunneling configuration is enabled

Last Modified: Jan 29, 2019

Bug Tracker

Affected Product:  See more info
APM-Clients APM(all modules)

Known Affected Versions:
11.5.1, 11.5.1 HF1, 11.5.1 HF10, 11.5.1 HF11, 11.5.1 HF2, 11.5.1 HF3, 11.5.1 HF4, 11.5.1 HF5, 11.5.1 HF6, 11.5.1 HF7, 11.5.1 HF8, 11.5.1 HF9, 11.5.2, 11.5.2 HF1, 11.5.3, 11.5.3 HF1, 11.5.3 HF2, 11.5.4, 11.5.4 HF1, 11.5.4 HF2, 11.5.4 HF3, 11.5.4 HF4, 11.5.5, 11.6.0, 11.6.0 HF1, 11.6.0 HF2, 11.6.0 HF3, 11.6.0 HF4, 11.6.0 HF5, 11.6.0 HF6, 11.6.0 HF7, 11.6.0 HF8, 11.6.1, 11.6.1 HF1, 11.6.1 HF2, 11.6.2, 11.6.2 HF1, 11.6.3, 11.6.3.1, 12.1.0, 12.1.0 HF1, 12.1.0 HF2, 12.1.1, 12.1.1 HF1, 12.1.1 HF2, 12.1.2, 12.1.2 HF1, 12.1.2 HF2, 12.1.3, 12.1.3.1, 13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4

Fixed In:
13.0.1, 12.1.3.2, 11.6.3.2, 11.5.6

Opened: Nov 09, 2017
Severity: 2-Critical
Related AskF5 Article:
K70644505

Symptoms

For some Network Access configurations, VPN cannot establish a connection with client systems running macOS High Sierra 10.13.1 using F5 Edge client or Browser helper apps.

Impact

The Edge Client unsuccessfully tries to connect, resulting in a loop. The client cannot establish VPN.

Conditions

The following conditions must be true: -- The Network Access resource Traffic Options setting is configured for Force all Traffic Through Tunnel. -- The Network Access resource Allow Local Subnet setting is disabled. (Both of these options are defaults.) -- Client running macOS High Sierra 10.13.1.

Workaround

1. Navigate to the Network Access resource. 2. Set the Network Access resource Allow Local Subnet checkbox to Enabled. 3. Save the setting, and apply the Access Policy.

Fix Information

Edge Client operation does not go into a reconnect loop and is able to establish and maintain connection successfully on macOS High Sierra 10.13.1.

Behavior Change