Standby cluster member with enabled SecureXL drops packets on Anti-Spoofing when VMAC mode enabled

Support Center > Search Results > SecureKnowledge Details

Standby cluster member with enabled SecureXL drops packets on Anti-Spoofing when VMAC mode enabled

Solution ID	sk100405
Product	ClusterXL, SecureXL
Version	R75, R76, R77, R77.10, R77.20, R77.30, R80.10, R80.20, R80.30
OS	Gaia, SecurePlatform 2.6
Platform / Model	All
Date Created	23-Apr-2014
Last Modified	03-Jun-2019

Symptoms

SmartView Tracker shows drop logs "Address spoofing" from Standby cluster member for traffic that is directed to the Standby member from the MAC address of the Active member.
Log example:
```
Type = Alert
Action = Drop
Information = message_info: Local interface address spoofing
```
Disabling SecureXL resolves the issue.
Disabling VMAC mode (refer to sk50840), resolves the issue.

Cause

When VMAC mode (sk50840) is enabled, all cluster interfaces go into promiscuous mode.

Consequently, traffic that enters the Standby cluster member is processed and subsequently dropped.

Solution

Note: To view this solution you need to Sign In .

©1994-2019 Check Point Software Technologies Ltd. All rights reserved.
Copyright | Privacy Policy