Symptoms

Missing ike-sa's are seen on standby BIG-IP when Initiator is placed behind NAT

Impact

IKE-SA's are not propagated to the standby device.

Conditions

-- Initiator is behind a NAT. -- High availability (HA) pair between BIG-IP. -- Dynamic template configuration on BIG-IP and NAT traversal is 'ON'. -- IPsec tunnel client traffic

Workaround

None

Fix Information

None

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips