If there is only 1 client connecting, then this is an issue......the way a 3k works (or any other VPN server) is that after a client disconnects, its IP is returned to the de-allocated pool....therefore, the next time a client connects, then it must get the first available de-allocated IP.......if this is not happening, then it may be related to the bug. Contact TAC. The issue is not reproducable (except at the same site).