VPN site to site flow denied by configured rule

[MehdiTN]

Hi Guys, 

flow is not working any more from two sites by vpn site to site, and i'm getting this message in packet tracer.

Can any body telle me where is then problem please  ?

Type VPN - subtype encrypt - action drop

ACL-drop  flow is denied from configured rule

thanks

[Rob Ingram]

Hi,
You are going to have to provide more information in order for us to help.

What is the full output of the packet-trace?
Has the VPN previously worked?
Has anything changed?
What is the output of "show crypto ipsec sa"?
Can you provide the configuration of both firewalls?

[MehdiTN]

Dear RJI,

the vpn worked well before.we tried to add a new vpn and since no more vpn flow.

response of   show crypto ipsec sa : 

   there are no ipsec SAS 

i cheked the VPN rule and it's enabled.

i have a backup of the asa 5525, but i'm afraid it might causes more problems.

thanks sir.

[Rob Ingram · Accepted solution]

Ok, if you've modified the VPN please upload your configuration on here

[mkazam001]

multiple factors could be causing - in the first instance, vpn tunnel will not come up the first time with packet tracer, usually the 2nd time

regards, mk