Switch log shows that Check Point MAC Address 0000.0000.XXXX is flapping between ports on the same VLAN

Support Center > Search Results > SecureKnowledge Details

Switch log shows that Check Point MAC Address 0000.0000.XXXX is flapping between ports on the same VLAN

Technical Level

Solution ID	sk106651
Technical Level
Product	VSX, Quantum Appliances, Quantum Security Gateways
Version	R75.40VS (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20 (EOL), R77.30 (EOL), R80.10 (EOL)
OS	Gaia
Platform / Model	2000, 4000, 12000, 13000, 21000, IP1280 (EOL), IP2450 (EOL), Intel/PC, Power-1 (EOL), UTM-1 (EOL), VSX-1 (EOL), Crossbeam (EOL)
Date Created	11-Jan-2016
Last Modified	01-Mar-2020

Symptoms

Log on physical switch shows that Check Point MAC Address 0000.0000.XXXX is flapping between ports on the same VLAN (these ports are shared between multiple Virtual Systems of a VSX Cluster).

Example of a log from Cisco switch:
MACFLAP_NOTIF: Host 0000.0000.6e00 in vlan 50 is flapping between port Gi0/1 and port Gi0/2

Cause

By default, Virtual Systems in a VSX Cluster use the same MAC Address for CCP packets. If these Virtual Systems are connected on the same network / VLAN, then the physical switch detects the same MAC Address behind different ports and generates the above log.

Solution

Note: To view this solution you need to Sign In .