Thanks to Nitin Thakur for some help. What worked was unplumbing the interface, plumbing it again and it "just worked" netstat -rn confirmed routing was correct.