hi.
yesterday I made the lab, and it already works.
If you have experience setting up site to site between routers, there is no difference between the pix, the logic applies the same:
the same pre shared key between both sides.
the remote peer for establishing the sa.
the same encryption, dh, transform set in both sides.
and the same access list mirrored in the opossite site for defining tarffic to send encrypted and traffic to recive encrypted.
If you have pdm try using the wizard for setting up the firewall, its easier than cli.
