I have created to two site-to-site VPN profiles, one test and one production. They have separate inside and outside private IPs, but are part of the same network object group. Both connections show as connected, however, the production connection does not pass traffic. I do a packet trace from the test ip with no problem. Doing a packet trace from the production ip and the packet is dropped: "(acl-drop) Flow denied by configured rule". What am I missing?
Have you tried putting them in separate network object groups, and using a unique acl for each one? Can you paste in the portions (acls, network object groups, and crypto map) that apply?
