I setup new VPN C2S with certificate authentication on NBM 3.8 SP5 server.

When I log to VPN server I can authenticate, DNS servers are successfuly
changed, but IP of client not. I can´t ping old ( without VPN client UP )
and "new" IP address.
VPN client shows IP address of encrypted network in column "local
ipaddress" in parenthesis and on VPN NRM page I see this VPN client with
ippaddress, that is configured in IP address pool in C2S configuration.