Hello ASA Gurus,
Running into a crazy issue here, we have a VPN concentrator (ASA5516), used a concentrator for more than 100 remote sites (3rf party companies that want access to a specific app)
recently we noticed an issue, to explain correctly below an exemple
remote site X ( remote Subnet A, B, C) |Meraki Firewall|---<IPSEC VPN IKEV1> --->|ASA55160| local host (Z).
phase 1 and phase 2 are ok, the customer is able to reach Z from subnets A and C, but he recently noticed that subnet B isn't able to reach anymore to host Z,
no changes have been made, the main concern that this behavior is now affection other VPN,
Can someone suggest a diagnostic approach here? I checked #show cryp ipsec sa peer <remote peer> from ASA5516, I can see different SAs for subnets A and C with encry/decry increments except for B,
NOTE: host Z can reach out to all subnets, A/B/C. which is weird,
Waiting for your feedback folks,
