I am currently working on 2 VPN 3005 concentrators and I want to create an IPSEC lan2lan tunnel. I've been trying to make things work but I cant seem to bring up the tunnel. here's the scenario... concentrator A connects to concentrator B via the internet. concentrator A & B have different private subnets. A can ping B but when I check on active tunnels I dont see any active tunnels. work station from the private network of concentrator A can ping the public IP of the concentrator B. but cannot connect to the private IP behind concentrator B. what I need is to bring up the VPN tunnel so that PC from the private segment of concentrator A can connect to the pc's on the private segment of cencentrator B.. thanks in advance.