Fun with IPsec stateful failover - http://dev.packetlife.net/blog...