A campus fabric migration preserves the SVI gateway addresses, but one downstream ACL still keys off the old chassis MAC and security monitoring floods with false anomalies

Routing is fine, yet dependent controls still expect the previous gateway identity.