> Source: [sk170592](https://support.checkpoint.com/results/sk/sk170592)

# sk170592 - Although Route Based VPN tunnel is established, no traffic passes through the Security Gateway

| Property | Value |
|----------|-------|
| Solution ID | sk170592 |
| Date Created | 2020-11-19 |
| Last Modified | 2020-12-01 |
| Technical Level | Advanced |
| Products | Security Gateway |
| Versions | R81 (EOS) |
| OS | Gaia |

## Symptoms

- * Although Route Based VPN tunnel is established, no traffic passes through the Security Gateway.
* Found the following entries in VPN kernel debug output:  

  @;233714114;27Oct2020 19:15:36.185887;\[cpu_22\];\[fw4_18\];dynamic_vpn_ip: VPN interface 27 related to local gateway 10.10.184.2 rather than a peer.;  

  @;233714114;27Oct2020 19:15:36.185891;\[cpu_22\];\[fw4_18\];fw_log_drop_ex: Packet proto=1 192.168.12.190:2048 -\> 192.168.12.187:59300 dropped by vpn_inbound_tagging_ex Reason: Dynamic VTI configuration is not ready or bad.;

## Cause

The local Security Gateway's VPN Domain overlaps the traffic destination of the peer Routed Based VPN. **When Domain-Based VPN is set to another peer, Domain Based VPN take precedence over Route Based VPN.** It causes the local firewall's `vpn_routing` table to think that the destination should be belong to the local network, not to the peer:  
@;233714114;27Oct2020 19:15:36.185887;\[cpu_22\];\[fw4_18\];dynamic_vpn_ip: VPN interface 27 related to local gateway 10.10.184.2 rather than a peer.;

<br />

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content