Crypto Access-list is not fully utilizing in site-to-site VPN

[kashifglobal12]

Dear Concern,

I am using access-list containing Source ip 192.168.101.8 and 101.43 and Destination Ip 192.168.102.93. In phase 2 what i am seeing is that phase 2 tunnel is established only between 192.168.101.8 and 192.168.102.93 and not between  192.168.101.43 and 192.18.102.93.

Kindly help.

[Marvin Rhoads]

Have you presented the VPN device with interesting traffic from the unused address pairs? An IPsec security association will only be formed (and kept up) in the event of interesting traffic.

[kashifglobal12]

Have you presented the VPN device with interesting traffic from the unused
address pairs? Sir didn't get you... I have configured same interesting
traffic on both sides....

[Marvin Rhoads]

When we say "interesting traffic" we mean actual packets flowing  on the network from the defined source address(es) to the defined destination address(es).