Using IPSEC 3des, the SA from the 3002 client side always has wrong IP address after a power cycle of all of the equipment. The IP it is using is the previously served DHCP address from the CableRouter, NOT the current one. The interface on the 3002 shows the correct DHCP served address, from the CableRouter, on it's public interface. Manual intervention to disconnect and reconnect of the tunnel fixes the problem (from either side of the tunnel). I have observed the same behaviour with both Linksys and SMC CableRouters, so I am guessing the problem is in the 3002. Everything has the latest firmware, IOS, etc. Any ideas?
