Bug ID 814997: After creating a NAT connection, if EIF timeout is changed, the connection gets deleted according to new timeout value

Last Modified: Apr 17, 2024

Affected Product(s):
BIG-IP AFM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4

Opened: Aug 14, 2019

Severity: 4-Minor

Symptoms

In dynamic source translation NAT if EIF timeout is set to one value, the flow is created and connection is established. If the EIF timeout is changed to a different value. Then the inbound entry remains for the modified interval after connection is deleted.

Impact

After the connection is deleted, the inbound entry remains according to the new EIF timeout value.

Conditions

The EIF timeout value is changed in the configuration after a connection is established.

Workaround

EIF timeout should preferably be set before any flows are created. Changing the value after a connection is established behaves according to the new EIF timeout value.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips