Is it possible to load balance when the VPN3000 does not have an interface in the address pools, i.e. using "non-local" address pools as the documentation puts it? I know this works without clustering by setting static routes to the pool on the nearest router. But in a clustering setup it seems to me there is no way to assign a static route since there is no way to pre-determine which cluster member the client will connect to (an additional virtual address on the private network would solve this but I suppose it's too late to hope for new features!)
I have this problem too.