Pix-to-Pix IPSec is OK, but I have routing problems!

[fnascimento]

I have Pix2Pix IPSec which works fine but there are some routing issues.

Pix 1 inside - 192.168.31.1

Pix 1 outside - 172.16.1.2

Internet (IPSec tunnel)

Pix 2 outside - 172.17.1.2

Pix 2 inside - 10.51.2.2

Router at site 2 (eth0) - 10.51.2.1

Router at site 2 (eth1) - 10.100.1.1

Routes:

Pix 1 - 0.0.0.0 0.0.0.0 172.16.1.1

Pix 2 - 0.0.0.0 0.0.0.0 172.17.1.1

Pix 2 - 10.100.1.0 255.255.255.0 10.51.2.1

How do I tell Pix 1 how to get to 10.100.1.0 network???

[bwalchez]

Since all your traffic to site two is encrypted, make sure that your access-list in PIX one knows about the 10.100.1.x network at the remote site.

[fnascimento]

Thanks .... I had a panic atack that evening .... the router belongs to somebody else ... and they "forgot" to amend the routes on it .....

There was ACL ....

[bcarroll]

When you do your vpn connection do you build it to the addresses on the inside interfaces or to the translated addresses on the outside?