This object controls whether the device's IP stack acts on ICMP redirect messages it receives (on) or ignores them (off) for a given address type. Leaving this on means a misconfigured or malicious router on the management subnet could redirect the box's outbound traffic path via a spoofed ICMP redirect, so security-conscious admins typically turn it off to harden the management plane against route poisoning. For example, setting this to off(2) protects the device from silently rerouting its own traffic based on an untrusted redirect message.