NAT for VPN dialin users

[global-gossip]

I've just set up dialin VPN on my PIX 515e.  The users can connect fine but

a) my split tunnel ACL is not applied and

b) I have the following error in syslog No translation group found for udp src outside:10.0.56.2/137 dst inside_lan:10.0.8.6/137

If i try to ping my inside interface from the client, i get a reply from the outside interface IP address.

Do I need a specific NAT rule for my VPN client users?

[ajay chauhan]

Not sure which IP is from VPN Pool but you should have no nat configured between VPN POOL and Inside Subnets.

Thanks

Ajay

[global-gossip]

This is correct and indeed how it was already configured.

The problem was I wasn't excluding my return traffic from NAT.