> Source: [sk100651](https://support.checkpoint.com/results/sk/sk100651)

# sk100651 - Users are not able to access the networks across the VPN tunnel

| Property | Value |
|----------|-------|
| Solution ID | sk100651 |
| Date Created | 2014-05-21 |
| Last Modified | 2016-03-14 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R82.10, R82, R81.20 |
| OS | Gaia |

## Symptoms

- Users are occasionally not able to access the networks across the VPN tunnel when Dynamic Routing is enabled on Security Gateway that runs on Gaia OS.

## Cause

VPN RIM routes are deleted on Security Gateway when the same routes are injected by a Dynamic Routing protocol (e.g., OSPF, BGP).

RouteD can handle different routes (static, OSPF, BGP, etc.) and decide, which route should be used based on protocol rank and route metric.

Static routes have a rank of 60.

OSPF routes have a rank of 10 by default, which means OSPF routes will be preferred over static routes. However, RouteD daemon does not treat kernel routes (in this case, RIM routes) as static routes.

RIM routes are not defined via RouteD daemon - they are added by the VPN kernel module, and these route have the same precedence as kernel remnant routes (254). As a result, RouteD is not able to differentiate between them.

RouteD daemon prefers the OSPF route even if the kernel route has lower preference than OSPF.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content