«

[professorguy]

I have a firewall that has a site-to-site VPN connection. Boiled down, it looks like this:

----------------------
access-list list1 permit ip host 10.1.1.1 host 1.1.1.1
access-list list2 permit ip host 10.1.1.1 host 2.2.2.2

crypto map cm 10 match address list1
...
crypto map cm 20 match address list2
----------------------

When I try to connect my 10.1.1.1 machine to 2.2.2.2, the crypto map seems to use the list1 access-list. I can see the hitcount go up on the list1 access-list but the list2 access-list stays stubbornly at 0.

The crypto maps only match on the source?!? How can one server connect to several different endpoints?

Thanks in advance for shedding some light here.

><professorguy

[swapnendu]

have u configured two separate tunnels on the PIX ? it'll be easier to troubleshoot if u post the VPN configuration part along with the NO NAT ACLS...