dear sir

I have Remote IPSec VPN configured on ASA5510, but we need to lets a VPN client send IPSec-protected traffic to another VPN user, something called "hairpinning",

anyway, I've configured following the manual:

1,same-security-traffic permit intra-interface

2,access-list vpn permit ip 172.16.99.0 255.255.255.0 172.16.99.0 255.255.255.0

3,nat (outside) 0 access-list vpn

but it does not work, attached as my configuration, who can check for me?

Thanks

tom