vrrp was failing on some virtual firewalls because it was using multicast MACs for its backup-addresses.