Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA L2L trouble: tunnel up, traffic doesn't pass

I've set up a L2L between 2 sites.

Both the ASA nat the traffic to internet with one public IP while another one (the one assigned to the outside interface) is reserved for L2L peering.

The tunnel is up since some day, as the output show crypto ipsec stats shows:

Active tunnels: 1

Previous tunnels: 76

However the traffic won't pass.

When i try to telnet from site A ( to site B (

the outcome is this:

%ASA-7-609001: Built local-host outside:

%ASA-3-305005: No translation group found for tcp src test: dst outside:

%ASA-7-609002: Teardown local-host outside: duration 0:00:00

However my NAT rules are these:

access-list outside_20_cryptomap extended permit ip

access-list inside_nat0_outbound extended permit ip

nat (inside) 0 access-list inside_nat0_outbound


global (outside) 1

nat (inside) 0 access-list inside_nat0_outbound

nat (inside) 1 access-list nat

It appears clear that this traffic shouldn't be natted, but just tunneled to the other side.

I cant understand then why it is discarded.

Does anyone can give me some suggestion?


Re: ASA L2L trouble: tunnel up, traffic doesn't pass

Do you have an interface by the name of 'test'? If so, you need to add:

nat (test) 0 access-list inside_nat0_outbound



New Member

Re: ASA L2L trouble: tunnel up, traffic doesn't pass

Thank you for the answer.

I figured the problem the following day and fixed the configuration.

Now all works.

Thank you anyway