One-Way access through VPN Tunnel

[amvita]

I have setup a VPN between a 3030 Concentrator and PIX. I need to allow an entire subnet behind the 3030 concentrator to access 2 hosts behind the PIX (i.e. initiate connections to the 2 servers behind the PIX).

I do not want to allow the 2 hosts behind the PIX to initiate connections to any of the hosts behind the 3030 concentrator.

Any ideas how to accomplish this?

[a-vazquez]

check out the following link on Configuring Cisco Secure PIX Firewall in a site-to-site IPSec VPN with overlapping private network addresses behind VPN gateways, hope this helps :

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800949f1.shtml