When configuring the Cisco ASA for VPN clustering, which IP address or addresses does the end-user device connect to?