I've got PIX505E and Cisco 837 to be connected via VPN. The problem is that I need 2 hosts on both ends to communicate to each-other using fake IP addresses, for instance, the host on PIX's end has IP of 10.10.10.10, it should be NATted to, say 192.168.10.10 and then it should connect to IP of 192.168.20.10 on the other end of the VPN which is actually a static-NATted IP address of the host with IP of 10.10.20.10 ? Hopefully this makes sense ... I know that it is easily possible on VPN concentrators, though I can't get it working on PIX/837. The PIX in particular complains regarding NAT/VPN issues and overlapping. Can anyone give me a hand with this one ? Sample config lines or HTTP ref would be appreciated !