The command "cphaconf failover_bond " does not work with Management Data Plane Separation (MDPS)

Symptoms

• The command "cphaconf failover_bond <bond_name>" does not change the port-channel (bond) members in an Active/Backup bond configuration.
• Repeated execution of the command does not result in any change to the active or backup status of the bond slave ports.
• No errors are displayed, but the expected failover does not occur.
• Management Data Plane Separation (MDPS) is enabled.

Cause

The issue is caused by a limitation related to the Management Data Plane Separation (MDPS) feature. The failover command is executed from the data plane (dplane), while the target bond port resides on the management plane (mplane). Because of this plane separation, the command cannot locate or operate on the intended bond port, causing the failover operation to silently fail.

Solution

This problem was fixed. The fix is included in:

• Check Point R82.10
• Jumbo Hotfix Accumulator for R82 starting from Take 103
• Jumbo Hotfix Accumulator for R81.20 starting from Take 158

If you choose not to upgrade, Contact Check Point Support to get a Hotfix for this issue. A Support Engineer will make sure the Hotfix is compatible with your environment before providing it.

For faster resolution and verification, collect these files:

1. CPinfo file from the Management Server involved in the case.
2. CPinfo file from the Security Gateway / each Cluster Member / Security Group involved in the case.

Hotfix installation instructions:

Refer to sk168597 - How to install a Hotfix.

NOTE

This solution has been verified for the specific scenario, described by the combination of Product, Version and Symptoms. It may not work in other scenarios.

Article Properties

Access Level: General Status: Approved by TAC Date Created: 2025-09-11 Last Modified: 2026-07-23