having a heck of a time trying to get this going.  I have an old ssl vpn I want to replace with a mx67 and any connect for my end users.  I've gone through the documentation sections for this but can't seem to find the answer I'm looking for.     currently my vpn solution is this :    client <-> internet <-> router/fw <-> old ssl vpn server <-> local net resources   essentially I want to replace the ssl vpn server with an mx67.  Currently I have it set as passthrough and anyconnect enabled using radius authentication.  in my testing, client is able to connect but I'm unable to access any of the local resources at the datacenter (i.e I can not ssh to a server that's was behind the router/fw above).  part of me thinks I'm missing a route somewhere.  in this mode does the mx67 not push any route info out?  considering I can't define any static routes in this mode I'm going to assume the answer is no.     question is how do I set up the mx67 to be a basic vpn concentrator using the anyconnect client that will allow both access to services behind it?     second question - if I can not do this in the passthrough mode and I have to use the routed mode, is it possible to have DHCP requests passed through to an internal DHCP server instead of using the mx67 as a DHCP server?     thanks.  ... View more