Symptoms

When you create a layer 2 security service in an SSLO topology, you will be unable to save the service if you select the same VLAN under the 'From BIG-IP' and 'To BIG-IP' in the 'Network Configuration' section.

Impact

You cannot save the layer 2 service configuration or deploy it to a managed BIG-IP device.

Conditions

This happens when you select the same VLAN under the section 'Default Properties - Network Configurations' when the VLAN field shows only one VLAN available to add to the security service.

Workaround

If there is only one VLAN available for the l2 service configuration, do not select the same VLAN under both 'From BIG-IP VLAN' and 'To BIG-IP VLAN.' Log in to the managed BIG-IP device, and fill out the device-specific overrides under the 'Network Configuration' section, and create a new VLAN for the L2 service.

Fix Information

None

Behavior Change