> Source: [sk166852](https://support.checkpoint.com/results/sk/sk166852)

# sk166852 - Enabling "ping" in the configuration of static route causes an issue with route-based site-to-site VPN  

| Property | Value |
|----------|-------|
| Solution ID | sk166852 |
| Date Created | 2020-05-20 |
| Last Modified | 2025-08-12 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.20, R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Enabling "ping" in the configuration of static route causes an issue with Route-based site-2-site VPN. Tunnel is up, but the VPN traffic is not working.
* Debug log:  
  dropped by vpn_encrypt_chain Reason: Could not change connection vpn interface

## Cause

As per [sk107185 - Static route / Default route is deleted and not added back on Standby cluster member after disconnecting and reconnecting a cable](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk107185): By default, if "ping" is configured for a route, and the ping to the next hop gateway fails, then the route is deleted from routing table. The moment the ping to the next hop gateway succeeds, the route is added back to the routing table.  

The issue in the current scenario is not the issue fixed in sk107185.

## Solution

This is an expected behavior.   

**Workaround:**   
Uncheck "ping" from the static route.   

1. Navigate to 'WebUI (Gaia portal) \> IPV4 Static Routes', and edit the specific route.
2. Uncheck "ping" and click "Save".

**Verification:**   
Verify if the Ping Enabled feature successfully reaches the Peer side.

* Peer side has a Interface that matches the Remote Address of the VTI interface.
* Peer side allows ICMP traffic.
* No conflicting NAT rules.
  * Including any rules that may effect a cluster interface's ability to fold behind the VIP IP address.  

    <br />

    <br />

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content