Bug ID 846317: Show net ipsec ipsec-sa traffic-selector not working on secondary blade

Last Modified: Apr 17, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0,,,,,, 14.1.2,,,,,,,,, 14.1.3,, 14.1.4,,,,,,, 14.1.5,,,,,, 15.0.0, 15.0.1,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,, 15.1.6,, 15.1.7, 15.1.8,,, 15.1.9,, 15.1.10,,,, 16.0.0,, 16.0.1,,

Fixed In:

Opened: Nov 05, 2019

Severity: 3-Major


The tmsh command 'show net ipsec ipsec-sa traffic-selector' does not work on the secondary blade.


IPsec SA's from the secondary blade are not displayed.


-- Configuration with secondary blades (cluster scenario). -- Running the command ont he secondary blade: show net ipsec ipsec-sa traffic-selector


You can use either of the following workarounds: -- Remove the traffic-selector classifier from the command, and all IPsec SA's are then displayed. -- The results of all blades can be viewed at once by issuing from the primary blade: clsh tmsh show net ipsec ipsec-sa

Fix Information

When issuing the command 'tmsh show net ipsec ipsec-sa traffic-selector' on a secondary blade, the correct results are now shown.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips