SQL Cluster Issues

[kaoslife]

We have our Primary site and Backup site connected through varoius routers and a PIx at each site. From our Backup Site we can connect to the two Physical host servers of the SQL CLuster, But are unable to connect to the Virtual Address. After doing some searching, I can see the packets getting to the PIX 515 at the Primary site, but this traffic does no leave the PIX. THe logs show no reason why this would be blocked, and all ACL's permit these hosts to communicate. Would anyone have an idea on how to troubleshoot this issue.

[sbilgi]

The inability to pass data on an established IPsec tunnel between a VPN Client and a PIX is frequently encountered when you cannot ping or Telnet from a VPN Client to any hosts on the LAN behind the PIX. In other words, the VPN Client and PIX cannot pass encrypted data between them. This occurs because the PIX has a LAN-to-LAN IPsec tunnel to a router and also a VPN Client. The inability to pass data is the result of a configuration with the same access control list (ACL) for both the nat 0 and the static crypto map for the LAN-to-LAN IPsec peer.

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_tech_note09186a008009448c.shtml