Bug ID 903501: VPN Tunnel establishment fails with some ipv6 address

Last Modified: May 27, 2020

Bug Tracker

Affected Product:  See more info
BIG-IP APM(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.4, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3

Opened: Apr 23, 2020
Severity: 3-Major

Symptoms

VPN Tunnel establishment fails with some ipv6 address

Impact

VPN Tunnel cannot be established.

Conditions

- APM is provisioned. - Network Access with IPv6 virtual server is configured.

Workaround

1. Disable the DB variable isession.ctrl.apm: tmsh modify sys db isession.ctrl.apm value disable 2. Perform 'Apply Access Policy' for the access policy attached to the virtual server. Important: The iSession control channel is needed if optimized apps are configured, so use this workaround only when 'No optimized apps are configured' is set (available in the GUI by navigating to Access :: Connectivity / VPN : Network Access (VPN) : Network Access Lists :: {NA resources} :: 'Optimization' tab).

Fix Information

None

Behavior Change