Standby cluster member with enabled SecureXL drops packets on Anti-Spoofing when VMAC mode enabled

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk100405
Technical Level
Product	ClusterXL, SecureXL
Version	All
OS	Gaia
Platform / Model	All
Date Created	23-Apr-2014
Last Modified	12-Aug-2021

Symptoms

SmartView Tracker shows drop logs "Address spoofing" from Standby cluster member for traffic that is directed to the Standby member from the MAC address of the Active member.
Log example:
```
Type = Alert
Action = Drop
Information = message_info: Local interface address spoofing
```
Disabling SecureXL resolves the issue.
Disabling VMAC mode (refer to sk50840), resolves the issue.

Cause

When VMAC mode (sk50840) is enabled, all cluster interfaces go into promiscuous mode.

Consequently, traffic that enters the Standby cluster member is processed and subsequently dropped.

Note: This SK is relevant only to Gaia with Kernel 2.6.18 or USFW.

Solution

Note: To view this solution you need to Sign In .