Support Center > Search Results > SecureKnowledge Details
Standby cluster member with enabled SecureXL drops packets on Anti-Spoofing when VMAC mode enabled
Symptoms
  • SmartView Tracker shows drop logs "Address spoofing" from Standby cluster member for traffic that is directed to the Standby member from the MAC address of the Active member.
    Log example: 
    Type = Alert
Action = Drop
Information = message_info: Local interface address spoofing
  • Disabling SecureXL resolves the issue.
  • Disabling VMAC mode (refer to sk50840), resolves the issue.
Cause

When VMAC mode (sk50840) is enabled, all cluster interfaces go into promiscuous mode.

Consequently, traffic that enters the Standby cluster member is processed and subsequently dropped.


Solution
 Note: To view this solution you need to Sign In .