> Source: [sk185193](https://support.checkpoint.com/results/sk/sk185193)

# sk185193 - ARP Resolution Failure Between Security Management Server and Security Gateway with Broadcom BCM5719 NIC Running UPPAK

| Property | Value |
|----------|-------|
| Solution ID | sk185193 |
| Date Created | 2026-07-23 |
| Last Modified | 2026-07-26 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * Secure Internal Communication (SIC) cannot be established between the Security Management Server and the Security Gateway.

* The management interface is configured on a bonded interface that uses the onboard Broadcom NetXtreme BCM5719 Gigabit Ethernet adapter with the tg3 driver.

* The Security Management Server continuously sends ARP requests for the Security Gateway IP address, but the ARP entry remains incomplete.

* Packet captures on the Security Gateway show incoming ARP requests, but connectivity remains unavailable for example:  

  ```
  
  [Expert]# tcpdump -nni bond host  
  ARP, Request who-has (ff:ff:ff:ff:ff:ff) tell length 28
  ARP, Request who-has (ff:ff:ff:ff:ff:ff) tell length 28
  ```

  <br />

* Running `arping` from the Security Gateway toward the Security Management Server may temporarily restore communication or provide partial connectivity.

* Creating a static ARP entry on the Security Gateway for the Security Management Server may temporarily allow SIC establishment.

## Cause

The onboard Broadcom BCM5719 Network Interface Card (NIC), identified as PCI ID 14e4:1657 with subsystem 103c:22be, uses the tg3 driver.  

This NIC is not supported by the Data Plane Development Kit (DPDK). Security Gateways with SecureXL running in User Space Packet Processing Acceleration (UPPAK) mode rely on DPDK-supported network hardware for packet processing.  

Because the Broadcom BCM5719 NIC does not have official DPDK driver support, this hardware configuration is not supported for Security Gateway operation in UPPAK mode.  

As a result, ARP processing on the affected Broadcom BCM5719 VLAN or bonded management port may behave unpredictably:

* ARP requests reach the Security Gateway, but ARP replies are not generated.
* Valid ARP replies reach the Security Gateway, but the entries are not learned correctly.
* Layer 3 connectivity between the Security Management Server and Security Gateway becomes unreliable.

The same NIC can operate on a Security Management Server because Security Management Servers do not use SecureXL, UPPAK, or DPDK for accelerated packet processing. They use the standard Gaia Linux networking stack.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content