This read-create flag controls whether the router sends ICMP Redirect messages out an IP interface built from this profile when it detects a better next-hop route for a host. Admins may disable it, its default, on interfaces where they don't want the router informing end hosts of alternate routes, for security or routing-consistency reasons. For example, with juniIpProfileIcmpRedirectEnable set to disable, the router forwards packets via its own route rather than sending an ICMP redirect back to the originating host.