Bug ID 757864: The [RADIUS::avp 168] iRule Command Appends '@tmm' to Link-Local IPv6 Addresses

Last Modified: Jan 22, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0,,,,,,,,, 13.1.1,,,,, 13.1.3,,,,,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,

Opened: Feb 07, 2019
Severity: 4-Minor


The address returned by [RADIUS::avp 168] can have the string '@tmm' appended to its end.


In this case, [RADIUS::avp 168] does not return a valid Link-local IPv6 address that can be used as-is by the rest of the iRule's logic.


Only seen if the RADIUS Frame-IPv6-Address attribute contains a link-local IPv6 addresses


If link-local addresses are expected to be seen in RADIUS packets in your environment, then the following iRule syntax can be used to strip out the string '@tmm' in case it exists in the returned address: set framedIP [lindex [split [RADIUS::avp 168 ip6] @ ] 0]

Fix Information


Behavior Change