> Source: [sk30079](https://support.checkpoint.com/results/sk/sk30079)

# sk30079 - ICMP Redirect packets are generated by ClusterXL with IP address of member instead of VIP, which causes the hosts to drop these ICMP Redirect packets

| Property | Value |
|----------|-------|
| Solution ID | sk30079 |
| Date Created | 2004-10-26 |
| Last Modified | 2015-07-13 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |

## Symptoms

- ICMP Redirect packets are generated by ClusterXL with IP address of member instead of VIP, which causes the hosts to drop these ICMP Redirect packets

## Cause

When an ICMP Error message (e.g., ICMP Redirect) was sent out, which was originated on a cluster member, the Source IP Address in the IP header of the ICMP Error packets is not translated to the ClusterXL VIP address.

Consequently, the host, which was supposed to receive this ICMP packet would not treat it properly (usually just dropping it).

*** ** * ** ***

ICMP Error packets are as described on page 38 of [RFC1122](http://www.ietf.org/rfc/rfc1122.txt) (Requirements for Internet Hosts - Communication Layers)  
3. INTERNET LAYER PROTOCOLS -  
3.2 PROTOCOL WALK-THROUGH -  
3.2.2 Internet Control Message Protocol -- ICMP :  
ICMP Type 3 "Destination Unreachable"  
ICMP Type 4 "Source Quench"  
ICMP Type 5 "Redirect"  
ICMP Type 11 "Time Exceeded"  
ICMP Type 12 "Parameter Problem"

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content