[nsp] IOS nat outside source static

[Stephane Perez]

Hi,

>I should be able to telnet to 10.10.0.0 from 192.168.2.20 (the "inside"
interface of the router
> in the 192.168.2.x subnet).  I can ping 192.168.2.20, so the router is
obviously proxy arping, 
>but I can't telnet to it.  I immediately get a "denied" on the client, and
deb ip nat shows NO 
>NAT ACTIVITY, confirmed by all 0-counters in a sh ip nat sta.

 Just an idea, have you added to the access list defining which IP traffic
can pass through the IPSec tunnel ?

regards