The MPSEC on the MPVPN can load balance VPN traffic on devices behind the MPVPN, or the VPN can be done on the MPVPN itself.