Looks like a proxy address mismatch is preventing this tunnel from coming up. If I give the pix an "ip any any" tunnel ACL, will it work? Or can a PIX 6.3.5 set the proxy address of a dynamic VTI on a router?

The VTI would be a handy way to let tunneled devices reach other un-tunneled devices on the same physical router interface. Thanks for any ideas!