Remote access VPN into a far end Site to site VPN

[cmorris_DRI]

I am having a problem getting remote access VPN users access to the far end of site to site VPNs. I remember reading something about this being a bug but i cannot find the information about it. Could anyone help me out with this, and point me to any documentation about this problem or know a solution to it?

[jackko]

just wondering what sort of devices we are discussing here.

providing the central site (i.e. hub site) has a pix v7 or router, then yes. alternatively if the central site has a pix v6.x, then the scenario is not feasible.

[cmorris_DRI]

They are both PIX version 6.3. If this is not possible could you give me a link or something to search for?

[jackko]

with v7, a new commnad "ame-security-traffic permit intra-interface" was introduced.

according to cisco doc:

to permits communication in and out of the same interface when traffic is ipsec protected.

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00804527dc.html#wp1098252