Multi-site VPN on ASA

[wedwardsvt]

I have kind of a unique architecture and need to terminate an IPSEC VPN on the inside interface of an ASA and then route the traffic out a second VPN tunnel that terminates on the outside interface.  I have both tunnels up at this point but I'm having trouble getting the traffic to route through the two VPN's.  I.e. I'm seeing transmitted packets on one of the tunnels with no received and the exact opposite on the other.

[SANTHOSHKUMAR SARAVANAN]

Hi ,

 On your case only phase 1 tunnel will be up . "Show crypto isakmp sa" will show MM_ACTIVE , but phase 2 tunnel shows "show crypto ipsec sa" only one side packet encryption , no packet decryption from other side . 

Check you crypto access-list , similarly interesting traffic must be connected or statically routed behind ASA interface .  

HTH

Sandy