Loading...
Loading...
The IPsec configuration utility (web UI) allows configuration of an invalid option "NONE" for Perfect Forward Secrecy when Internet Explorer browser is in use.
The racoon daemon will fail to start and all tunnels may fail to work. The racoon.log file may contain messages like: 2016-09-14 16:32:16: INFO: Reading configuration from "/etc/racoon/racoon.conf" 2016-09-14 16:32:16: ERROR: /etc/racoon/racoon.conf.bigip:59: "}" DH group required. 2016-09-14 16:32:16: ERROR: fatal parse failure (1 errors) 2016-09-14 16:32:16: ERROR: failed to parse configuration file.
IPsec IKE-v2 Peer created with 'None' option for Perfect Forward Secrecy from GUI.
'None' option for Perfect Forward Secrecy in IPsec IKE Peer creation page is an invalid option and should not be selected.
Configuration utility (web UI): Removed 'None' option for Perfect Forward Secrecy in IPsec IKE Peer creation page.
Click on a version to see all relevant bugs
F5 Integration
Learn more about where this data comes from
BugZero Plan
Streamline upgrades with automated vendor bug scrubs
BugZero Prevent
Wish you caught this bug sooner? Get proactive today.