I know this is an old threat but just in case. You can have vpn gina module (SBL) installed and not use it. The only option that will force you to connect and you cannot control is Always-On. But SBL is optional. JP
The only way to make a Site-to-Site VPN work on port 10000 is by doing EzVPN Router(config-crypto-ezvpn)#do sh run | sec cryptocrypto ipsec client ezvpn vpn-hw-client connect auto ctcp port 10000 I hope this helps!