The icmp redirect send command enables transmitting the ICMP re-direction packets.
The undo icmp redirect send command disables transmitting the ICMP re-direction packets.
By default, the function for transmitting the ICMP re-direction packets is disabled.
When a routing device finds that the inbound and outbound interfaces of a packet are the same, it sends Redirect messages to instruct the host or routing device that sends the packet to choose a better next hop. If the network is congested or the CPU usage is high, run the undo icmp redirect send command to disable the system from sending ICMP Redirect messages. After the network or CPU usage restores to normal, enable the function again. For security purposes, the FW can send ICMP Redirect messages but does not process received ICMP Redirect messages.