After two usg5000 make VRRP, two devices status is master.
Check the state of the heartbeat port, in the firewall ping the peer end heartbeat port address, and display normally
Check switch configuration, mainly to the middle of the Ethernet channel, and find trunk link configuration. Carefully check the trunk permit vlan number, and find it is not modified, so lead to Layer 2 VRRP message can't transfer.
In the VRRP networking scene, the double master situation is usually caused by the heartbeat line configuration.
In a cut over scene, the user only change the SW vlan number, at the same time change the FW IP address, and lead to the FW appear the double master situation.
Suggest that when configure VRRP, inspect THE switch configuration and confirm the Layer 2 message can pass.