Hello everybody, I have the following construct with a customer. At the main site there is an ASA5515 and behind it an MX100. There is an MX64 at the remote location. The ASA lets everything through towards the MX100 and nothing is blocked at this point in time. The auto VPN tunnel is active and data from the remote site to the main site flows smoothly and I can reach everything I would like to reach. But if I try to reach the remote location from the main location, my traceroute only gets to the MX100. The traffic does not go into the tunnel to the remote site. On the ASA I have a static route for the remote network and the MX100 as a gateway. According to the documentation there is something like "VPN Subnet Translation", but unfortunately I can't find it. Ideas? Main Site local network: 192.168.57.0/24 Remote Site local Network: 10.0.1.0/24 ASA static route to 10.0.1.0/24 Gateway 192.168.54.254 (IP of MX100) ... View more