> Source: [sk121597](https://support.checkpoint.com/results/sk/sk121597)

# sk121597 - L2TP users have no access to internal resources published to Internet during 15 minutes after disconnect

| Property | Value |
|----------|-------|
| Solution ID | sk121597 |
| Date Created | 2017-11-20 |
| Last Modified | 2021-06-03 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81 (EOS) |

## Symptoms

- * L2TP users have no access to internal resources published to the Internet during 15 minutes after disconnect.
* Gateway logs show: "Clear text packet should be encrypted".

## Cause

**Environment:** "Route all traffic" option selected.

When L2TP client is connected to the Security Gateway, its IP address is being registered as owned by a client. This registration will allow **only encrypted traffic** to be accepted from the IP address.

<br />

If communication "in clear" is attempted from the IP address to the encryption domain, it will be dropped for up to 15 minutes since the last communication between the L2TP client and the Security Gateway.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content