Bug ID 846317: Show net ipsec ipsec-sa traffic-selector not working on secondary blade

Last Modified: Mar 21, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.1.0

Opened: Nov 05, 2019
Severity: 3-Major

Symptoms

The tmsh command 'show net ipsec ipsec-sa traffic-selector' does not work on the secondary blade.

Impact

IPsec SA's from the secondary blade are not displayed.

Conditions

-- Configuration with secondary blades (cluster scenario). -- Running the command ont he secondary blade: show net ipsec ipsec-sa traffic-selector

Workaround

You can use either of the following workarounds: -- Remove the traffic-selector classifier from the command, and all IPsec SA's are then displayed. -- The results of all blades can be viewed at once by issuing from the primary blade: clsh tmsh show net ipsec ipsec-sa

Fix Information

None

Behavior Change