Last Modified: Apr 17, 2024
Affected Product(s):
BIG-IP TMOS
Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 15.1.5, 15.1.5.1, 15.1.6, 15.1.6.1, 15.1.7, 15.1.8, 15.1.8.1, 15.1.8.2, 15.1.9, 15.1.9.1, 15.1.10, 15.1.10.2, 15.1.10.3, 15.1.10.4
Fixed In:
16.1.0
Opened: Feb 26, 2020 Severity: 4-Minor
The IKEv1 IPsec daemon racoon goes into an endless restart loop. 2020-01-02 08:36:36: ERROR: /etc/racoon/racoon.conf.BIG-IP:376: "}" duplicated sainfo: loc='ANONYMOUS', rmt='10.42.80.0/24', peer='ANY', id=0 2020-01-02 08:36:36: ERROR: fatal parse failure (1 errors) 2020-01-02 08:36:36: ERROR: failed to parse configuration file.
IPsec IKEv1 tunnels cannot be established.
Duplicate wildcard traffic-selectors, one with ::/0 and one with 0.0.0.0/0, attached to different IPsec policies.
Configure duplicate traffic-selectors only when they are attached to interface mode IPsec policies.
Config validation now prevents duplicate wildcard selectors attached to tunnel mode IPsec policies.