When I create a VPN (server side), I have the choice of either enable it on Outside, or Inside interface. Usually I'll enable it on outside interface (so that the remote VPN client can access the Pix and from which to access the inside LAN).Then on ...