On 8/29/08, SunnyDay <cscosunny at gmail.com> wrote: > Im not going to use cerificates just policy based vpn or route-based > is there any issue on these? As long as your cluster is well configured (rto mirror sync, config sync, etc), I can't thing of anything else. B.R