> Source: [sk116172](https://support.checkpoint.com/results/sk/sk116172)

# sk116172 - Traffic is dropped with "Local interface address spoofing" message on standby cluster member

| Property | Value |
|----------|-------|
| Solution ID | sk116172 |
| Date Created | 2017-03-20 |
| Last Modified | 2017-04-08 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- Traffic is sourced from the firewall and dropped on the external interface of the standby member with "Local interface address spoofing" message. This should not be possible with the path the traffic should take.

## Cause

The "*netstat -r*" command shows that there are two identical routes.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content