sa3110 vpn tunnel established, but no client IP assigned

[Chris Carlucci]

We have a pair of sa3110 VPN appliances. The clients are set up with the IP addresses of both so that if a group is full the client will try the second box. Several users have reported that they receive a message that the tunnel has been established and the client is waiting for an IP to be assigned, but no address is assigned. I have connected to each box while the problem is occuring and seen (for example) 10 connections, with 8 of 12 slots in one group being utilized and the person who is not getting an IP address is a member of that group.

Any suggestions?