2 ASA site vpn is up but not traffic is passing

[Sheraz.Salim]

Hi All.

we are setting up a vpn site to site between two ASA. i can see from the CLI that vpn phase 1 and phase 2 pass sucessfully. but interesting traffic is not passing through. we setup ASA vpn via ASDM. we also done a packet trace and packet tracer output is pass with intersting traffic.

i spent 7 house with no lucky kindly please help. but site have nat (inside,outside) source static DM_INLINE_NETWORK_17 DM_INLINE_NETWORK_17 destination static NETWORK_OBJ_10.13.136.0_24 NETWORK_OBJ_10.13.136.0_24 no-proxy-arp route-lookup

any advise would be life saving for me.

[Dinesh Moudgil]

Hi sherazrose,

Your natting looks good but we will need more information to isolate the issue.

What you need to do is run the command and share the output:

packet-tracer input inside icmp h.h.h.h 8 0 x.x.x.x detailed

where h.h.h.h is local interesting traffic IP and x.x.x.x being remote interesting traffic IP.

How many tunnels do you have on the ASA?
Can you share the sanitized config output from the device.?

Regards,
Dinesh Moudgil

P.S. Please rate helpful posts.Hi sherazrose,

[Sheraz.Salim]

Hi. I fix the problem. actually it was an interall routing issue. What i did  i just gave a static route pointing to the inside asa interface and it fix the problem.