The interesting traffic using access-list in site to site VPN matches the two end host/users IP address between whom traffic has to be encrypted. My question is that now the two host ip address matched in acl are they using a public IP address or private IP address. I read somewhere online that the two host IP address matched in acl are private IP's but I want to confirm this.