Support Center > Search Results > SecureKnowledge Details
Standby cluster member with enabled SecureXL drops packets on Anti-Spoofing when VMAC mode enabled Technical Level
  • SmartView Tracker shows drop logs "Address spoofing" from Standby cluster member for traffic that is directed to the Standby member from the MAC address of the Active member.
    Log example:
    Type = Alert
    Action = Drop
    Information = message_info: Local interface address spoofing
  • Disabling SecureXL resolves the issue.
  • Disabling VMAC mode (refer to sk50840), resolves the issue.

When VMAC mode (sk50840) is enabled, all cluster interfaces go into promiscuous mode.

Consequently, traffic that enters the Standby cluster member is processed and subsequently dropped.

Note: This SK is relevant only to Gaia with Kernel 2.6.18 or USFW.

Note: To view this solution you need to Sign In .