when I run command "clear ipsec sa peer" on ASA , it refreshed a NAT table.

[ding qin]

Our device is ASA5515 firewall . 

It worked well, but after I ran "clear ipsec sa peer xxxxxx" , we can't access 8.8.8.8 . after I deleted this site-site vpn , it still didn't work . then I deleted all site-site, then I rebooted the firewall , we can access 8.8.8.8.

Thanks,

Duncan

[balaji.bandi]

clear ipsec sa peer X.X.X.X  <--- only clears the one tunnel.

Are you using the same tunnel to go to internet, yes you will see small ping loss 1 or 2 then you will re-establish the tunnel.

depends how you configured, what is other end ? is site to site VPN both Cisco ASA  or any other vendor ?

[ding qin]

no, it is  different tunnel. 

the other end is ASA as well.