I am configuring site-to-site vpn, one end is a router and the remote end is a cisco concentrator 3030. The remote end is using PAT. When I configure the interesting access-list, the source address (remote end)is the PAT address or remote network addresses which before PAT.