Traffic logs show drop message "IP routing failed (ipin routing failure)"

[ramilu]

Hi evryone, 

Our monitoring system detected a short drop of connectivity to the management interface of one of our VSX chassis cluster members.

When I checked the logs, I saw that the snmp and ping requests were dropped by the gateway with informational message "IP routing failed (ipin routing failure)".

I've never come across such a message before and could not find any article online on what might have caused this.

The normal communication was fully restored a few mintes later on its own and even in the meantime, some packets were handled normally and accepted by the firewall.

I was wondering whether someone can suggest how to troubleshoot this as we want to avoid having a bigger problem at some point later by ignoring this now.

Thanks!

[_Val_]

Please open a TAC ticket for this issue

[the_rock]

Cant say I ever seen that myself either. TAC case might be best option, but closest I found to this message is below:

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...

[Timothy_Hall]

Is Policy Based Routing in use? 

Any chance that an upstream next hop router crashed or was rebooted (thus making the next hop for the firewall's route invalid) and connectivity returned once the router came back up?

[_Val_]

May not be related to routing, could be an ARP cache issue (very rare, but...)

[amoruck]

I know this post is old, but in case anyone else is searching for drop with "ipin routing failure" message - I have this logged (VSX cluster R80.30) when there was destination NAT configured, and there was no route to "translated destination" IP address. 

[StackCap43382]

Again to reply to an old thread.

Same issue: IP routing failed (ipin routing failure)

Someone had configured an object with an in-object NAT containing the problem destination IP.

The Post-NAT IP did not have an entry in the route table resulting in the above error.