> Source: [sk98417](https://support.checkpoint.com/results/sk/sk98417)

# sk98417 - ClusterXL forwarding of ARP Reply packets might cause duplicate entries on a Cisco Load Balancer

| Property | Value |
|----------|-------|
| Solution ID | sk98417 |
| Date Created | 2014-02-03 |
| Last Modified | 2020-09-21 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- * By default, all ARP Reply packets received by the Active cluster member are forwarded to other peer members. This behavior may cause connectivity issues on some Layer-3 devices connected to the cluster. These ARP packets are re-broadcasted or multicasted from the Active Member.

* For example, on Cisco ACE Load Balancer:

  1. ARP Request is sent from the Standby cluster member to some external server
  2. External server sends an ARP Reply received from physical port X on the Load Balancer
  3. The Active cluster member receives the ARP Reply packet and forwards it to the Standby cluster member (with exactly the same payload)
  4. The Load Balancer receives this identical forwarded ARP Reply packet on physical port Y, which causes it to alert on conflict with port X
* Note - This issue has been seen on Nexus 7k switches

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content