If I create a static to dynamic (router to pix) vpn tunnel, doesn't the pix automatically create the access-list from the router access-list? If this is true, then when I create another dynamic vpn tunnel from a router to the PIX using the same dynamic tunnel, the PIX will create the access-list form that router also correct? If this is not correct please let me know. Thank you