Thanks for spending the time to answer my post.

It will be a static to staic site-to-site VPN not dynamic.

In my lab I think I will have to give both peer IP's (outside ports into hub) an address in the same subnet so they can commuicate?

Not really - all you need is a x-over cable and some default static routes.

e.g ASA:-

Outside Interface

IP address 1.1.1.1 255.255.255.0

route outside 0.0.0.0 0.0.0.0 1.1.1.1

E.G Router:-

int eth 0/0 or fa 0/0

ip address 2.2.2.2 255.255.255.0

ip route 0.0.0.0 0.0.0.0 eth 0/0 or fa 0/0

The above instructs the device to pass default traffic out the respective interfaces and "arp" for the mac using the specific IP or interface - since they are on a hub or x-over the remote side will respond.

HTH>

Thanks.

Sorry for the silly question but if 1.1.1.1 and 2.2.2.2 go into a hub how will they ping each other as they are on different subnets?

Not a silly question if you do not know - but you are missing some of the basic priciples.

Even though it's not proper english - you should never answer a question with a question, but this time it's fitting to do so...so let me ask you:-

What is a broadcast domain?

What is ARP?

Knowing the concepts/operation of the above will answer your question.

HTH>