> Source: [sk109222](https://support.checkpoint.com/results/sk/sk109222)

# sk109222 - Active Cluster member sends GARP for Physical IP address of Standby member

| Property | Value |
|----------|-------|
| Solution ID | sk109222 |
| Date Created | 2015-12-22 |
| Last Modified | 2016-05-03 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- * Active Cluster member sends GARP for Physical IP address of Standby member.  

* `fw ctl debug -m fw + conn drop` and `fw ctl debug -m cluster + if mac forward select` debug show:

  `[TIME DATE] ... FW-1: Member sends gratuitous ARP request on ifn 1 for clsip x.x.x.x;; `  
  `[TIME DATE] ... FW-1: fwha_send_arp_request: x.x.x.4 --> x.x.x.4 on ifn 1;`
  `
  `[TIME DATE][cpu_1];[fw4_1];fw_xlate_arp: entered with ifnum=5;;   
  [TIME DATE][cpu_1];[fw4_1];FW-1: fwha_send_gratuitous_arp: ip=a2fe905, _htonl(ip_addr)=5e92f0a, mac=00:1C:7F:3C:B2:6A;;   
  [TIME DATE][cpu_1];[fw4_1];FW-1: fwha_send_arp_request: x.x.x.5 --> x.x.x.5 on ifn 1;
  `
  `

## Cause

In the debug output the following is expected and .4 is the VIP ;

`[TIME DATE] ... FW-1: Member sends gratuitous ARP request on ifn 1 for clsip x.x.x.x;; `  
`[TIME DATE] ... FW-1: fwha_send_arp_request: x.x.x.4 --> x.x.x.4 on ifn 1;`

The below is not expected as .5 is the physical address of FW01

`[TIME DATE]...;fw_xlate_arp: entered with ifnum=5;; `  
`[TIME DATE]...;FW-1: fwha_send_gratuitous_arp: ip=a2fe905, _htonl(ip_addr)=5e92f0a, mac=00:1C:7F:3C:B2:6A;; `  
`[TIME DATE]...;FW-1: fwha_send_arp_request: x.x.x.5 --> x.x.x.5 on ifn 1;`

As can be seen, two host nodes perform an automatic Hide NAT for fw01.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content