Bug ID 714281: NSH tunnel reject inner packet from other vendor

Last Modified: Jul 12, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.0.0, 13.0.0 HF1, 13.0.0 HF2, 13.0.0 HF3, 13.0.1, 13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1

Fixed In:
14.1.0

Opened: Apr 09, 2018

Severity: 2-Critical

Symptoms

NSH does not interoperate between BIG-IP systems and some external NSH vendors.

Impact

The BIG-IP system rejects the packet. Lost connectivity with some of the vendors.

Conditions

-- NSH tunnel. -- The external NSH vendor cannot configure inner packet MAC destination.

Workaround

To work around this limitation, you can do either of the following: -- Use an external vendor that does support configuration of inner packet MAC destination. -- Avoid use NSH for external vendors without such ability.

Fix Information

The system can now passes NSH packets as expected in this scenario.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips