You can do this on a PIX also.
Actually though, when a client on the LAN pings a remote VPN client, because it thinks it's on the same network it will send an ARP query with the IP address of the client, requesting its MAC address. Because the concentraor (or the PIX) have issued this IP address it will respond to the ARP request with its own MAC address.