MAC-Flapping on the same bond interface (active-standby)

[andrewb]

Hi, 

What is the behavior of bond interface on an "active-standby" state? 

I believe the "standby" state does not have any traffic flowing thru right? 

We have an issue here after upgrading the 15600 to R81, the switch started reporting MAC-FLAP, when we checked it was coming from the same bond port of the firewall which is set to active standby. 

When I did a wireshark i saw traffic on the standby port and the CPHA packet source mac-address they are using the same MAC-address

Do we expect the same mac-address on both ports when they are trying CPHA packet?  When i checked a 16200 - it was using 00:00:00:00:01:00 , however the 15600 was using the physical MAC of the the other interface on the same bond 

Thanks 

[Chris_Atkinson]

Is the 16200 also using active-standby bonds and what version & JHF by comparison?

[andrewb]

Yes, the 16200 is running the same version R81 with same bond configuration (active-standby). The 15600 has the higher JHF

[the_rock]

I know in the old days of CP, sometimes that would happen depending on whether virtual MAC option was checked under cluster object in smart console.

Andy

[andrewb]

Yes, but it is just weird - the port is only on standby state, it does not goes up and down. It should just take over when the primary fails

[the_rock]

Just to verify all, can you please send output of below commands on both members? Please blur out any sensitive info.

Andy

cphaprob roles

cphaprob state

cphaprob -i list

cphaprob -a if

cphaprob syncstat

Cheers,

Andy

[andrewb]

Hi, ill try to capture, BTW this is VSX not normal firewall 

[the_rock]

I am pretty sure same commands would work on VSX as well.