Shouldnt be too hard, just setup a static translation to the 3000 tunnel endpoint and conduits allowing ipsec traffic through to it.
For example:
static (inside,outside) 199.199.199.154 10.19.19.154 netmask 255.255.255.255
conduit permit ip host 199.199.199.154 any