> Source: [sk95971](https://support.checkpoint.com/results/sk/sk95971)

# sk95971 - When using RIM, kernel routes not removed when VPN down on R76 gateway with DAIP/SmartProvisioning object

| Property | Value |
|----------|-------|
| Solution ID | sk95971 |
| Date Created | 2013-11-11 |
| Last Modified | 2016-03-09 |
| Technical Level | Advanced |
| Products | Security Management Server |
| Versions | R82.10, R82, R81.20, R82.20 |

## Symptoms

- * When VPN is "down", RIM successfully monitor the VPN as "down", but fails to delete the routes from the routing table of the gateway.
* The issue occurs for DAIP gateways and Smart Provisioning.
* In VPND.elg the following error will appear: "rm_route_execute: Error removing route xx.xx.xx.0/255.255.255.0-\>0.0.0.0. cprti reason: Unknown network interface"

## Cause

After the last SA is deleted or expired for a given DAIP/ROBO , peer_ike_del_from_ike_sa will send DELETE_ALL_IKE_SA_FOR_DAIP trap to vpnd. As part of this trap handling, vpnd will remove the resolved link from resolved_link, and the IP from DAG_ID_to_IP and DAG_IP_to_ID.

During this, tunnel monitoring is still occurring, and eventually tunnel test will fail and the entry in tnlmon_life_sign kernel table will expire. This calls the free func for the kernel table that triggers cleanup of RIM routes. The function to remove the RIM route tries to look up the route to the peer via resolved_link table that is already deleted.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content