diff --git a/src/libcharon/sa/redirect_manager.c b/src/libcharon/sa/redirect_manager.c
index dfc71e106..e37c26f0d 100644
--- a/src/libcharon/sa/redirect_manager.c
+++ b/src/libcharon/sa/redirect_manager.c
@@ -75,7 +75,18 @@ static bool should_redirect(private_redirect_manager_t *this, ike_sa_t *ike_sa,
 		bool (**method)(void*,ike_sa_t*,identification_t**) = provider + offset;
 		if (*method && (*method)(provider, ike_sa, gateway))
 		{
-			redirect = TRUE;
+			switch (*gateway ? (*gateway)->get_type(*gateway) : 0)
+			{
+				case ID_IPV4_ADDR:
+				case ID_IPV6_ADDR:
+				case ID_FQDN:
+					redirect = TRUE;
+					break;
+				default:
+					DBG1(DBG_CFG, "redirect provider returned invalid gateway");
+					DESTROY_IF(*gateway);
+					continue;
+			}
 			break;
 		}
 	}