what is one configuration step you must make on the gateway object taking part in the route-based VPN?