topic Re: Traffic logs show drop message "IP routing failed (ipin routing failure)" in Firewall and Security Management

Traffic logs show drop message "IP routing failed (ipin routing failure)"

ramilu — Wed, 18 Aug 2021 11:56:54 GMT

Hi evryone,

Our monitoring system detected a short drop of connectivity to the management interface of one of our VSX chassis cluster members.

When I checked the logs, I saw that the snmp and ping requests were dropped by the gateway with informational message "IP routing failed (ipin routing failure)".

I've never come across such a message before and could not find any article online on what might have caused this.

The normal communication was fully restored a few mintes later on its own and even in the meantime, some packets were handled normally and accepted by the firewall.

I was wondering whether someone can suggest how to troubleshoot this as we want to avoid having a bigger problem at some point later by ignoring this now.

Thanks!

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

_Val_ — Fri, 20 Aug 2021 12:32:14 GMT

Please open a TAC ticket for this issue

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

the_rock — Fri, 20 Aug 2021 13:32:19 GMT

Cant say I ever seen that myself either. TAC case might be best option, but closest I found to this message is below:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk169612

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

Timothy_Hall — Fri, 20 Aug 2021 14:01:27 GMT

Is Policy Based Routing in use?

Any chance that an upstream next hop router crashed or was rebooted (thus making the next hop for the firewall's route invalid) and connectivity returned once the router came back up?

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

_Val_ — Fri, 20 Aug 2021 14:28:40 GMT

May not be related to routing, could be an ARP cache issue (very rare, but...)

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

amoruck — Tue, 28 Dec 2021 20:34:36 GMT

I know this post is old, but in case anyone else is searching for drop with "ipin routing failure" message - I have this logged (VSX cluster R80.30) when there was destination NAT configured, and there was no route to "translated destination" IP address.

Re: Traffic logs show drop message "IP routing failed (ipin routing failure)"

StackCap43382 — Thu, 07 Aug 2025 08:11:54 GMT

Again to reply to an old thread.

Same issue: IP routing failed (ipin routing failure)

Someone had configured an object with an in-object NAT containing the problem destination IP.

The Post-NAT IP did not have an entry in the route table resulting in the above error.