Site to sites Filtered VPN

[zazzero]

I need to set-up a site to sites (PIX 515 and PIX 501s) VPN where all remote clients can access to only two IP address in Central site; everyone must be able to start the VPN.

Which is the right way ?

1 - Network to network VPN IPSec rule and apply an access rules between remote networks and central site IP address

2 - Remote network to Central Site server IPSec rules without access rules

3 - ????

I'm using rel. 6.2 and PDM 2.0.1

Thanks

[vijkrish]

You answered the Q yourself. First choice sounds good. Any trouble with it ?

Vijay.

[zazzero]

Thanks.

Stefano