we have a number of dynamic vpns and we need to be able to access them from remote acess vpn (ipsec), problem is that given the remote sites are on Dvpn the SA's constantly gets lost if there's no traffic. So we want to create a script that will send icmp packets every so often to an ip address of the vpn pool... problem is that it's only a pool and there's no interface with this ip address.
Question is : can I exclude one ip address from the vpn pool and make it as a sub-interface on the inside interface of the firewall such that I'll be able to ping it?
