PIX 501 <--> VPN 3030 Site-Site internal subnet access problem

[avermilya]

172.16.69.x <-->PIX (Public IP)<---> Internet <--> (Public IP) VPN3030<--(172.16.68.0)-> Firewall <--10.x.x.x Subnet

From 10.x.x.x subnet, I can ping all devices behind remote PIX subnet. Ping 172.16.68.0 subnet from devices behind the PIX is fine, but I could not ping any devices in 10.x.x.x subnet.

Any sugestions are reaaly appreciated.

[pkapoor]

I understand that you cannot ping from the 172.16.69.x subnet to the 10.x.x.x subnet. But you can ping from 172.16.69.x to the 172.16.68.x subnet. Right?

If yes, then check the firewall between the 3030 concentrator and the 10.x.x.x subnet.

It should permit ICMP echo from 172.16.69.x to 10.x.x.x.

[avermilya]

Thank you so much for your help and you are right. It was the Firewall behind the Concentrator blocking it. Everything work now.