Thank you for your response. I think I may have an issue with this.

If I apply the command:

split-tunnel-policy tunnelall

How will this affect my normal vpn clients who do infact use split tunneling to access the internet via their local gateway? i already have the following in my config:

split-tunnel-policy tunnelspecified

Will this negatively affect my current setup?

thanks

You should be able to create a separate group policy, apply that group policy to the l2l tunnel group and configure tunnelall in that group policy only. Make sense? Most likely your remote access vpn clients are on a different policy than your l2l tunnel anyway.

Actually, my mistake, since the document is for remote access vpn, it uses split tunnel policy. But since you have a l2l tunnel, you will not have to worry about split tunnel policy, you will just have to make sure that all the traffic from the remote end goes over the tunnel :-)

Here are the important parts of the config...

same-security-traffic permit intra-interface

global (outside) 1 172.18.124.166

nat (outside) 1 192.168.10.0 255.255.255.0

Ah! I see now. back to pix basics...are you allowed to have more than one global statement?

Thank you very much for your help!