I have a L2L VPN between two ASA5510. The tunnel is up and passing traffic between 14 network pairs but two. I have checked that the interesting traffic is in the no nat ACL, in the crypto map ACL and in the interfaces permitted ACL in both sites. I have checked that crypto mal ACLs match in both sides. When I run "show crypto ipsec sa X.X.X.X" I get the following for the both ACL lines corresponding to the network pairs:
:: Site 1::
Pair 1 (10.10.1.0 ---> 10.10.3.0):
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 587, #pkts decrypt: 587, #pkts verify: 587
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
Pair 2 (10.10.19.0 ---> 10.10.3.0):
#pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
#pkts decaps: 2199, #pkts decrypt: 2199, #pkts verify: 2199
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
::Site 2::
Pair 1 (10.10.3.0 --> 10.10.1.0)
#pkts encaps: 709, #pkts encrypt: 709, #pkts digest: 709
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 709, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
Pair 2 (10.10.3.0 --> 10.10.19.0)
#pkts encaps: 2667, #pkts encrypt: 2667, #pkts digest: 2667
#pkts decaps: 0, #pkts decrypt: 0, #pkts verify: 0
#pkts compressed: 0, #pkts decompressed: 0
#pkts not compressed: 2667, #pkts comp failed: 0, #pkts decomp failed: 0
#pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
#PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
#send errors: 0, #recv errors: 0
I have read a similar case resolved with a reset of the equipment in the site where the packets were not being encapsulated. But I don't think a reset should be the solution.
