I have a strange problem.
I cant send packets between 1400 and 1480 bytes to a remote site connected through a aes-256_sha vpn tunnel. This is causing alot of connection problems.
when i send those packets a see a log entry "No translation group found for icmp src outside:x.x.x.x dst inside:192.168.1.65 (type 3, code 4)"
192.168.1.65 is my station i send the packets from and x.x.x.x is the outside ip address of the asa. The x.x.x.x address is used the nat all the outgoing connections
I tried the command crypto ipsec fragmentation before-encryption outside but that didn't helped.