I have a 2811 with 3 ISP's, and am trying to set up equal-cost routes for load-balancing. The ISP interfaces and firewall interface are in a "PUBLIC" vrf. All other interfaces are in the global config. Everything is fine with a single default route. However, when I add a 2nd default route, I lose all connectivity to both public interfaces. I can still access the firewall interface (from a node behind the interface). Are there any restrictions in VRF for multiple default routes? Related config is attached.