A gateway IP remains stable while one downstream security policy still keys off the previous virtual MAC after a fabric migration during a failover rehearsal

Address continuity masks an identity change that another control still cares about. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.