Cannot ping across the subnet...

Exo,

Long time no see,

In the route where you have 10.1.1.1 you have to add a route for the
traffic from and to 192.168.1.x/x to 192.168.2.x/x is 10.1.1.1 your
firewall (JuniperNetScreen-25)?

Yours Sincerely
Johan Andersson