Symptoms

BIG-IQ ships with HTTP/2 enabled. Under certain circumstances, you might not be able to access BIG-IQ over a VPN and you see a 'User Session Terminated' message.

Impact

You cannot access BIG-IQ.

Conditions

When you try to access a BIG-IQ over a VPN.

Workaround

To work around this issue, edit the /etc/webd/webd.conf file to remove the http2 references. 1. Look for these two lines: listen [::]:443 ipv6only=on ssl http2; listen *:443 ssl http2; 2. Remove the http2 references, so the lines now read: listen [::]:443 ipv6only=on ssl; listen *:443 ssl; 3. Then, from the BIG-IQ console, restart webd: bigstart restart webd webd restarts, which should take only a few seconds.

Fix Information

HTTP/2 is now disabled by default, so this issue no longer occurs.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips