Just to clarify...
RRI is used on the VPN 3000 to advertise networks to internal routers that are connected to 3002 hardware clients in NEM.
Clients behind and not behind a 3002 are advertiesed to the private network (private int on 3000). 3002 not in NEM are treated as clients.
Routes on the concentrator are added to the 3002 if OSPF is used.
Is this right?