So hopefully Keep got either TAC or the vendor to get this setup already, but this discussion got me thinking about an 861 router I had lying around. So today I set a system like this up to demo for client using EZ-VPN to connect to their UC560.

This is not as complex as Keep's setup (ASA5510 in front of the UC560 vs using the UC560 as the endpoint), but the 861 config file would be about the same as his 891s.

So if you still need help Keep, let me know and I'll post some configs.