load balancing through VPN 3000 series

[kamal-learn]

hi guys

let s imagine we have a central site with two or three vpn 3000 concentrator in parallel mode to achieve load balancing for remote connection such VPN client 3002 that happens correctly, my question why we can not achieve load balancing for other connections such as LAN-TO-LAN ??

thanks in advance

[Collin Clark]

L2L can not be load balanced (I wish it could too)

[kamal-learn]

thanks Collin.

yes i know that L2L cannot be loadbalanced but my question was why??

any explanation would be great

thanks in advance

[Collin Clark]

I would assume that it's because L2L uses identity for IKE communications and the end-point would change and IKE/IPSec see that as an anti-replay violation.