Yes, just think of the IPSec tunnel as any other serial link between two devices. Each network on either side of the tunnel will need a route to the other networks to be able to get to them. This route should point to the Private interface address of the 3030 and the 3030 will do the rest.
