Bug ID 907645: IPsec SAs may not be mirrored to HA standby

Last Modified: Nov 22, 2021

Bug Tracker

Affected Product:  See more info
BIG-IP LTM(all modules)

Known Affected Versions:
15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 15.1.4.1, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2

Fixed In:
16.1.0

Opened: May 08, 2020
Severity: 2-Critical

Symptoms

Some IPsec Security Associations (SAs) may not be mirrored to the HA standby device.

Impact

The HA standby system is unable to take over established tunnels when HA failover happens.

Conditions

-- HA mirrored configured -- Many IPsec tunnels are established

Workaround

None

Fix Information

All IPsec SAs are mirrored to the high availability (HA) standby device.

Behavior Change