VRRP was failing on some virtual firewalls because it was using multicast MACs for its backup-addresses. It immediately started working when I enabled the checkboxes below.