For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
Mar 17, 2015

RADIUS LB and port translation

I just discovered a concerning problem in the way that the LTM is handling some of our RADIUS traffic. I can see through a network trace that there are times when the LTM translates the source port o...
application delivery
LTM
pete_71470's avatar
pete_71470
Icon for Cirrostratus rankCirrostratus
Mar 19, 2015

When using Preserve, the ephemeral can be changed by LTM if it is already in use. Using "Preserve Strict" will keep the ephemeral even if in use (possibly causing future chaos with the connection).

 

  • smp_86112's avatar
    smp_86112
    Icon for Cirrostratus rankCirrostratus
    Mar 19, 2015
    Yes, I understand this, generally speaking. What I can't explain is why the LTM is changing the source port, when I see /zero/ connections to the VIP in the connection table. If there was a conflict with an ephemeral, I should see at least /some/ connections - not zero.