VPN 3000 load-balancing, address Pool and RRI

[buntschu]

Hi,

We have 2 VPN 3000 configured for load-balancing. The clustering is made on the public interface (wifi net) with a virtual address. We use the External interface for the access from Internet. We use RRI to inject the route the private side (through OSPF). My questions are:

a) Can we use the same pool of addresses on both VPN ?

b) Could we use the same group for VPN connection on the public and external interfaces ?

b) When disconnecting a VPN client that was on the public interface, the assigned address stay in the routing table of the VPN (I saw bug CSCeh14595, but is resolved with 4.7.2), how can we remove it ?

Thanks for your help and comments !

Francois

[fmeetz]

This URL should help you:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2284/products_tech_note09186a0080094b4a.shtml