I have a client that has two PIX 515 at the hub site with about 80 remote L2L VPNs. I was thinking about moving to an EZVPN configuration in order to simplify the config and provide backup VPN capability. They are currently using static load balancing (half of the VPNs on one PIX and half on the other). Can the PIX 515 run in both modes (ezvpn and l2l)? I am concerned about messing with the config and dropping all the remote sites. Also can anyone give advice on whether this is worth doing or should I just use two set peer statements for each crypto map and duplicate the config on each unit? Any suggestions would be appreciated.