The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode with enabled CoreXL
Technical Level
Solution ID
sk106745
Technical Level
Product
ClusterXL, IPSec VPN, CoreXL
Version
R75, R76, R77, R77.10, R77.20, R77.30, R80.10
Platform / Model
All
Date Created
06-Jul-2015
Last Modified
27-May-2019
Symptoms
Some Remote Access VPN clients are not able to connect to ClusterXL in Load Sharing Unicast mode.
Kernel debug ('fw ctl debug -m cluster + select') on the non-Pivot cluster member shows that sometimes the Source MAC of VPN packets is inverted incorrectly (refer to lines "fwha_select_ip_packet: The inverted back source MAC address will be ...").
Disabling CoreXL on all cluster members resolves the issue.
