I would create a DMZ for the internet based serversI would suggest somethign more likeInet|Inet router|ASA ---- DMZ with externally accessed servers|Interal router| Internal lansAs far as policy, I would allow the internet uses to access the DMZ reso...

Therre are some good documents online. I have one set up with an ASA running 7.2.1. The pool resides onthe ASA and is routed to it so the replies reture to it. Are you using the normal cisco vpn client?Marty BarronLooks like thisinet ->asa -->in<-- r...

try looking here for a walkthoughhttp://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800ab518.shtmlit goes though the basic steps, also if you search cco there are several good guides on setting up basic vpns