On 7/8/05, Richard Green <richardgreen1965 at gmail dot com> wrote:
> 
> Henry wrote:
> > Have you tried this link. I followed these directions an dit works fine for
> me.
> > http://m0n0.ch/wall/docbook/examplevpn.html#id2600839
> 
> Yes saw that. My config matches (have also tried with just the specific Phase
> 2 settings of  - MD5 and 3DES to cut down the negotiation opions...).
> 

Are you certain - I can't see where you're disabling NAT on the VPN
packets so they route correctly?

From that link:
Last step is to tell the PIX to not use NAT on the packets using this
VPN connection and route them instead.
[...]    
access-list no-nat permit ip 10.0.0.1 255.255.255.0 10.0.1.0 255.255.255.0
access-list no-nat permit ip 10.0.1.0 255.255.255.0 10.0.0.0 255.255.255.0

--g'luck
gm