I have two sites, each with a Cisco ASA 5505, and a site-to-site VPN between them. Site A is my main office and has no problems. At Site B, the ASA 5505 is on the inside of a DSL router and is acting as my DHCP server. The DSL router is in bridge mode with NAT disabled, and I authenticate to the DSL over PPPoE configured on the ASA.
The VPN tunnel is up, and traffic passes over the VPN with no problem.
At site B, users can access internal resources at site A; however, no one can browse the web, even though name resolution is OK.
I suspect something is misconfigured either in the DSL router or in the ASA.
What do I do?