Who Me Too'd this topic

Hello,

simple question:

Does PA devices send / support icmp redirect ?

Use case:

PA device is the default GW for local LAN subnet (A).

PA device has a route to an another subnet (B). The next hop is on his LAN Interface.

Local Clients devices has only a default GW to PA LAN Interface.

From my understanding and some tests:

PA device does not send ICMP redirect to Local Clients when they try to reach another subnet (B).

icmp echo / reply are OK but other type of communications fall with strange behavior on monitor. Traffic form local subnet are seen from his outside interface (not the lan) with destination NAT etc... Traffic seems to "loop" on the PA device.

If The local Client have a static route for B subnet everything is ok.

Thanks in advance.

Best regards.

Guillaume