I am trying to set up a system whereby I can access servers connected to the third(external) interface on my concentrator by a site to site vpn connected either by the internet on my public interface or via my lan on the internal private interface. I can establish the vpn ok but seem unable to pass traffic both ways. I suspect it is a routing issue but am not sure. Has anyone done anything similar?

Thanks