Bug ID 757864: The [RADIUS::avp 168] iRule Command Appends "@tmm" to Link-Local IPv6 Addresses

Last Modified: Feb 07, 2019

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4

Opened: Feb 07, 2019
Severity: 4-Minor

Symptoms

The address returned by [RADIUS::avp 168] can have the string "@tmm" appended to its end.

Impact

In this case, [RADIUS::avp 168] does not return a valid Link-local IPv6 address that can be used as-is by the rest of the iRule's logic.

Conditions

Only seen if the RADIUS Frame-IPv6-Address attribute contains a link-local IPv6 addresses

Workaround

If link-local addresses are expected to be seen in RADIUS packets in your environment, then the following iRule syntax can be used to strip out the string "@tmm" in case it exists in the returned address: set framedIP [lindex [split [RADIUS::avp 168 ip6] @ ] 0]

Fix Information

None

Behavior Change