Hi

I have two PIX (PIX1 and PIX2) to bulid up a L2L VPN tunnel. Both of two PIXs have default route pointing to ISP GW. If I change the default route to host route or static route on PIX1 and PIX2, the VPN tunnel doesn't work, but PIX1 and PIX2 can ping each other. My question is why we can't use the host route or static route for VPN tunnel build up, only default route can work?

Thanks. Leo