ipsec (microsoft AD using transport mode) is working fine on our client (172.16.x.x) PC accessing web server (10.10.20.5). we plan to add another web server and load balance it using 6509 csm. we are using routed mode on csm. when we used the csm, the physical ip address of the web server was changed to 10.20.20.5 and used 10.10.20.5 as the csm's virtual ip. here's our problem came out. need an advice on how to make our setup work.