VPN Client cannot ping each other

[aqswdefrgt]

I am using PIX 501 version 6.3. Currently I am facing a problem regarding the VPN Client. When VPN Client A and B connected to the VPN, they will be given an IP address from the range of 192.168.2.100-192.168.2.200. But VPN Client A cannot ping B or gain access to B VNC. Neither can B do the same to A. Is it that I must add an access-list to allow VPN Client to ping each other? Please Help....

[attrgautam]

Doubt if you can do it. Packets coming through an interface cannot go out through the same interface (unless it is V7). Explains why you cant ping A to B.

[gfullage]

The problem is that you're using a PIX as the head-end device. The PIX specifically will not route a packet back out the same interface it came in on, that includes VPN packets from one client going back out the same interface to another VPN client. There is unfortunately no way around it, sorry.

[BRIAN SEKLECKI]

Thank you for your definative answer. I'm was pretty sure that I had gotten off the boat and gone up river all the way.