diff --git a/src/yggdrasil/ckr.go b/src/yggdrasil/ckr.go
index c1558663..baa0058c 100644
--- a/src/yggdrasil/ckr.go
+++ b/src/yggdrasil/ckr.go
@@ -37,6 +37,10 @@ func (c *cryptokey) init(core *Core) {
 	c.ipv6sources = make([]net.IPNet, 0)
 }
 
+func (c *cryptokey) setEnabled(enabled bool) {
+	c.enabled = enabled
+}
+
 func (c *cryptokey) isEnabled() bool {
 	return c.enabled
 }
diff --git a/src/yggdrasil/core.go b/src/yggdrasil/core.go
index 10cf272d..3a3531f6 100644
--- a/src/yggdrasil/core.go
+++ b/src/yggdrasil/core.go
@@ -121,7 +121,8 @@ func (c *Core) Start(nc *config.NodeConfig, log *log.Logger) error {
 		return err
 	}
 
-	if nc.TunnelRouting.Enable {
+	c.router.cryptokey.setEnabled(nc.TunnelRouting.Enable)
+	if c.router.cryptokey.isEnabled() {
 		c.log.Println("Crypto-key routing enabled")
 		for ipv6, pubkey := range nc.TunnelRouting.IPv6Destinations {
 			if err := c.router.cryptokey.addRoute(ipv6, pubkey); err != nil {