diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index d13e02a1a9..55ed8032b8 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -288,7 +288,8 @@ charon {
 	threads = 16
 	ikesa_table_size = 32
 	ikesa_table_segments = 4
-	init_limit_half_open = 1000;
+	init_limit_half_open = 1000
+	install_routes = no
 
 	# XXX: There is not much choice here really users win their security!
 	i_dont_care_about_security_and_use_aggressive_mode_psk=yes