@elyes I don't see a reason why the Ext. VIP is trying to reach the user tunnel subnet...😮 We should see only the return/reply traffic from the Ext VIP and that too should be destined to the user's public IP address.
Is it trying to reach all the connected users or just few users always?
... View more