Hello I have VPN tunel between cisco router and ASA. I have 5 ACL entries host to host and are exaclty same on both sides. VPN is working fine. After that I have added subnet on cisco router and customer added host to host on other side and we have mismatch. I have tested ( sendig traffic-standard MQ requests) and this caused whole VPN outage even those 5 entries were affected.
Is is standard behavior? Can ACL mismatch caused whole VPN down? Or it shoul only affect IPs which are not matching?