> Source: [sk178484](https://support.checkpoint.com/results/sk/sk178484)

# sk178484 - 10 GB interface on a VRRP Backup member stays in the "Master" status

| Property | Value |
|----------|-------|
| Solution ID | sk178484 |
| Date Created | 2022-03-22 |
| Last Modified | 2024-03-31 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * 10 GB interface on a VRRP Backup member stays in the "Master" status.

* The 10 GB interface uses the i40e driver.

  You can check the driver with the "`ethtool -i`" command in the Expert mode.

  Example:

  ```
  
  [Expert@VrrpMember2:0]# ethtool -i eth0
  driver: i40e
  ```

## Cause

By default, network interfaces that use the i40e driver perform source pruning, which drops packets with the source MAC address that matches one of the receive filters. This causes the backup slave Media Independent Interface (MII) status not to work when using the ARP monitoring in channel bonding.

## Solution

This problem was fixed. The fix is included starting from:

* [Check Point R81.20](https://support.checkpoint.com/results/sk/sk173903)
* [Jumbo Hotfix Accumulator for R81.10](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81.10/Default.htm) starting from Take 75
* [Jumbo Hotfix Accumulator for R81](https://sc1.checkpoint.com/documents/Jumbo_HFA/R81/Default.htm) starting from Take 72
* [Jumbo Hotfix Accumulator for R80.40](https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.40/Default.htm) starting from Take 172
* [Jumbo Hotfix Accumulator for R80.30](https://sc1.checkpoint.com/documents/Jumbo_HFA/R80.30/Default.htm) starting from Take 255

Check Point recommends to always upgrade to the [Recommended version](https://support.checkpoint.com/results/sk/sk95746) ([Security Gateway](https://support.checkpoint.com/product/73) / [VSX](https://support.checkpoint.com/product/359)).

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

### These immediate workarounds are available:

Workaround 1:
> 1. Connect to the command line on each VRRP Cluster Member.
>
> 2. Log in to the Expert mode.
>
> 3. Disable the source pruning on the problematic interface:
>
>    `ethtool --set-priv-flags <Name of Physical Interface> disable-source-pruning on`
>
> To apply this change during each boot, add this command at the bottom of the `/etc/rc.d/rc.local` script.

Workaround 2:
> In the VRRP configuration, change the VMAC mode from "VRRP" to "Interface".

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content