VPn3030 cluster for loadbalance behind firewall

[schublee]

we have two vpn3030 to setup cluster for loadbalance behind firewall, do we need do NAT for this three IP address (cluster IP and two vpn3030 IP ) ?

[mustafa_nbk]

hi,

If your vpn concentrator is behind the NAT device and it's using a private IP address then you have to create a static NAT for cluster & two concentrator Ip address because all those IP's should able to reach from outside to effectivly work this load balance setup.

In VPN load balance configuration, you have to use private IP address not the real IP address.

Thanks,

Mustafa