Virtual MAC is a means of doing HA at layer 2, rather than layer 3. Essentially, in addition to a shared IP there is a shared MAC address which is owned by whichever unit is active. By implementing this, all virtual service traffic will communicate to this shared MAC address, allowing the standby device to pick up the traffic seamlessly. In the event of a failover, upstream devices do not need to change the ARP record associated with services.