Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode with enabled CoreXL

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk106745
Technical Level
Product	ClusterXL, IPSec VPN, CoreXL
Version	R75 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20, R77.30 (EOL), R80.10 (EOL)
Platform / Model	All
Date Created	06-Jul-2015
Last Modified	27-May-2019

Symptoms

Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode.
Kernel debug ('fw ctl debug -m cluster + select') on the non-Pivot cluster member shows that sometimes the Source MAC of VPN packets is inverted incorrectly (refer to lines "fwha_select_ip_packet: The inverted back source MAC address will be ...").
Disabling CoreXL on all cluster members resolves the issue.

Solution

Note: To view this solution you need to Sign In .