> Source: [sk183952](https://support.checkpoint.com/results/sk/sk183952)

# sk183952 - Management traffic incorrectly routed via Data Plane port when MDPS and "Same Virtual MAC" feature are enabled on Quantum Maestro

| Property | Value |
|----------|-------|
| Solution ID | sk183952 |
| Date Created | 2025-09-16 |
| Last Modified | 2025-10-27 |
| Technical Level | General |
| Products | Scalable Platforms |
| Versions | R81.20 |
| OS | Gaia |

## Symptoms

- When both Management Data Plane Separation (MDPS) and the Same Virtual MAC (VMAC) feature are enabled on a Quantum Maestro Security Group: 

* Management traffic (for example, traffic destined for the Security Management Server) appears on the Data Plane port (bond1.xy) instead of the expected Management Plane port (magg0).
* SmartLog displays duplicate or incorrect logs: traffic to the Security Management Server appears as coming from both the Management Plane (magg0) and Data Plane (bond1.xy) ports.
* This behavior does not occur if MDPS is disabled or the Same VMAC feature is off.

## Cause

A problem in the Quantum Maestro cluster's interface mapping logic causes incorrect handling of management traffic when both MDPS and Same VMAC are enabled. The system incorrectly associated management traffic with the Data Plane port (bond1.xy) in logs and in routing.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.

A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.  
For faster resolution and verification, collect these files:

1. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Management Server involved in the case.
2. [CPinfo](https://support.checkpoint.com/results/sk/sk92739) file from the Security Gateway / each Cluster Member / Security Group involved in the case.

**Hotfix installation instructions:**   
Refer to [sk168597 - How to install a Hotfix](https://support.checkpoint.com/results/sk/sk168597).

Related Solutions

* [sk138672 - Management Data Plane Separation (MDPS)](https://support.checkpoint.com/results/sk/sk138672)
* [sk165674 - Support for the "Same VMAC" in Scalable Platforms and ClusterXL](https://support.checkpoint.com/results/sk/sk165674)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content