On some devices you won't see the recursive routing log, instead will only see this one: ADJ-5-PARENT  Midchain parent maintenance for IP midchain out of TunnelXXX - looped chain attempting to stackJust wanted to add it here in case someone is googli...

Hi Bill,As per the following documentation the tunnel should remain up when you are using NEM:http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808a61f4.shtml#v2Though if you have the chance to test it in the...

Corey,This is a known issue documented on the following link:https://supportforums.cisco.com/docs/DOC-26829Quoting from the above document:Generally it is a good idea to stick with the same version that you are running so if you are current running: ...

Another option that will be supported by Cisco is L2TP over IPsec:http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800942ad.shtml

That's what the group-lock feature Karsten suggested is for, it will bind a tunnel-group to a group-policy, if you authenticate to a tunnel-group but the RADIUS mapping sends you to a group-policy different than the one specified in the group-lock va...