I've got a R77.30 cluster of two nodes (running on vmware).
The active node can ping the default gateway and onward to the rest of the network without any issue.
However, the standby node can't even ping the gateway, let alone anything beyond it. If I unload the policy from the node, then it is able ping it.
Logs suggest the traffic is being nat'd to the cluster's address. The gateway can ping active, standby and cluster addresses.
I've tried fw ctl set int fwha_forw_packet_to_not_active 1 on both nodes, but that didn't help.
The management interface is reachable via a different gateway (and static route).
Any suggestions greatly appreciated!