> -----Original Message-----
> From: Lee Sharp [mailto:leesharp at hal dash pc dot org] 
> Sent: Friday, February 27, 2009 1:07 PM
> To: m0n0wall at lists dot m0n0 dot ch
> Subject: Re: [m0n0wall] Multiple IPSEC tunnels between two endpoints
> 
> You only need one tunnel, and appropriate routes and rules.  
> The tunnel is between the core router and the core router.
> 
>              Lee
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> 

So... Setup the one tunnel.

10.0.0.0/17  <--->  10.1.0.0/17

Once that is up and running, add a static route to say

INTERFACE	iSCSI (or should this be WAN)
NETWORK	172.16.40.0/24
GATEWAY	172.16.40.1   (or should this be 10.1.0.1???)

And then I should be able to get to the other iSCSI subnet at SITE 2?
Obviously I have to make both side mirror each other.

Thanks for your help!  Been scratching my head with this one for a couple of
days.

Andrew