Bug ID 985953: GRE Transparent Ethernet Bridging inner MAC overwrite

Last Modified: Feb 07, 2024

Affected Product(s):
BIG-IP TMOS(all modules)

Known Affected Versions:
14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 15.0.0, 15.0.1, 15.0.1.1, 15.0.1.2, 15.0.1.3, 15.0.1.4, 15.1.0, 15.1.0.1, 15.1.0.2, 15.1.0.3, 15.1.0.4, 15.1.0.5, 15.1.1, 15.1.2, 15.1.2.1, 15.1.3, 15.1.3.1, 15.1.4, 16.0.0, 16.0.0.1, 16.0.1, 16.0.1.1, 16.0.1.2, 16.1.0, 16.1.1

Fixed In:
17.0.0, 16.1.2, 15.1.4.1, 14.1.4.5, 13.1.5

Opened: Jan 22, 2021

Severity: 4-Minor

Symptoms

Traffic not being collected by virtual server and therefore not being forwarded to the nodes.

Impact

Virtual server is not collecting decapsulated packets from the GRE Transparent Bridge tunnel unless the dest-mac of the encapsulated packet is the same as the mac-address of the GRE tunnel.

Conditions

Encapsulated dest-mac is not equal to the Generic Routing Encapsulation (GRE) tunnel mac-address.

Workaround

None

Fix Information

Added a new DB key 'iptunnel.mac_overwrite'. This DB key defaults to 'disable'. Set the DB key to 'enable' to cause the BIG-IP system to overwrite the destination MAC of the encapsulated traffic: tmsh modify sys db iptunnel.mac_overwrite value enable tmsh save sys config This allows virtual servers on the BIG-IP system to process traffic.

Behavior Change

Added a new DB key 'iptunnel.mac_overwrite'. This DB key defaults to 'disable'. To cause the BIG-IP system to overwrite the destination MAC of the encapsulated traffic, set the DB key to 'enable' and save the config: tmsh modify sys db iptunnel.mac_overwrite value enable tmsh save sys config This allows virtual servers on the BIG-IP system to process traffic.

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips