A VPN Routing action indicates that traffic was decrypted from one VPN tunnel, then re-encrypted straight into another VPN tunnel. Usually happens between satellites in the same Star-based VPN Community if allowed in the Community settings, but can also happen between different VPN Communities as authorized by the vpn_route.conf file. Note that the per-VPN Community VPN domain feature in R80.40 can help fine tune this behavior, see here: sk164417: Traffic from one VPN community not routed to another VPN community
Gateway Performance Optimization R81.20 Course
now available at maxpowerfirewalls.com