Do you have other routing rules in the routing table that cause VPN routing rules to fail to add?