we have vpn l2l tunnel name xyz 192.168.2.5, 192.168.2.6 are maped to the tunnel the vpn tunnel working fine but we added another ip 192.168.2.6 to vpn tunnel and move this server to dmz It is showing that the traffic cumming from outside is decrypting but it is not encrypting and going back. access-list DMZ-XCHG-nat0 extended permit ip host 192.168.2.6 172.20.1.5 255.255.252.0 access-list WEBDMZ_access_in1 extended permit ip host 192.168.2.6 172.20.1.5 255.255.252.0

same access list for other 2 ip is implemented in inside network and it is working fine. What should be the problem ?

message showing in my pix firewall like this

#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0

#pkts decaps: 9, #pkts decrypt: 9, #pkts verify: 9



Software/Hardware used:
cisco pix firewall 525