Yes,

I am using site-to-site.

I am using a 5520 and connecting to a remote site using a 5505.

It seems that only trafic that originates form subnets that are directly connected to the 5520 will only pass even when I define the source as any.

I have used other vpn clients and it work perfectly using the same interesting trafic config (Openswan to 5505).

I do appreciate your time...

Thank You...

joseph,

Do you have other networks behind ASA5520 and you already configured them as interesting traffic?

Would you please post the configuration on ASA5520? Excluding sensitive information.

Toshi

Here is a diagram and the important sections of my running config(s).

(see attachment)

Thank You

Again...

Joe

Joe,

Is there a layer3 device between old nets and new nets? Does this device have a route to 10.10.170.0(remote-end) pointing to ASA5520? Does ASA5520 have routes of old nets to route them back to Layer3 device?

Toshi

Thank You .... Toshi

I had a route from my Layer3 device to the 5520 but did not have them back the other direction.

Thanks again...!

Joe...

Joe,

I have no doubt why ASA is pretty cool.(grin)

Good job. let me know how things work out.

Toshi