I have a site to site vpn set up. Site A has an asa 5520 and site B has a juniper netscreen firewall. I can ping a machine in site b from site a through the tunnel just fine, however I cannot ssh. When I initiate the ssh connection I see the hitcounters on the ssh acl increase on site a's asa, but cannot see any ssh traffic coming in at the firewall on site b. Here are my tunnel ACL's on the asa side.
access-list tunnel extended permit tcp 206.188.60.0 255.255.255.0 any
access-list tunnel extended permit udp 206.188.60.0 255.255.255.0 any
access-list tunnel extended deny ip any any log alerts interval 1
When I inititate the ssh connection the tcp rule's hit counter increases.
Any suggestions on a fix?