During VRRP Split brain situation, Both virtual MAC and virtual IP address is owned by both VRRP node. So both VRRP node will send VRRP hello advertisement with source as mac as 00:00:5E:00:01:VRID  and destination mac as 01:00:5e:00:00:12 and on receiving node, VRRP advertisement source mac address coming in packet will match with his own MAC address and those packets are getting dropped in case of ICE ethernet controller due to anti-spoof MAC feature inbuilt with ICE NIC. 


Verify whether ethernet controller is ICE or not:


lspci | grep Ethernet 


04:00.0 Ethernet controller: Intel Corporation Device 1592 (rev 02)

0c:00.0 Ethernet controller: Intel Corporation Device 1592 (rev 02)



Solution: As of now only workaround to fix this issue is to use physical MAC for Virtual IP.


set protocols vrrp mac-address-mode physical