VMAC MAC addresses are switched between interfaces after policy installation

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk65149
Technical Level
Product	ClusterXL
Version	R75.10 (EOL), R75 (EOL), R71.20 (EOL), R71.30 (EOL), R71.40 (EOL), R71.50 (EOL), R71.10 (EOL), R71 (EOL), R75.20 (EOL), R75.30 (EOL), R75.40 (EOL), R75.45 (EOL), R75.46 (EOL), R75.47 (EOL)
OS	SecurePlatform 2.6, Gaia
Platform / Model	All
Date Created	09-Aug-2011
Last Modified	23-Nov-2016

Symptoms

ClusterXL Virtual MAC (VMAC) mode is enabled (per sk50840).
After making any changes in SmartDashboard the policy was installed onto ClusterXL members.
Output of 'cphaprob -a if' command shows that Virtual MAC addresses 'moved' between different interfaces.

Cause

When an attribute in a ClusterXL object is changed, the entire object is saved in $FWDIR/conf/objects_5_0.C, and a save does not guarantee that the order of interfaces is maintained. As a result, the index of the VIP interface may change, which may cause the VMAC ID to change as well, since part of the VMAC ID is based on the index of the interface.

Note: The issue does not apply to R75.40VS

Solution

Note: To view this solution you need to Sign In .