At Router2801 side I'm able to access any network at the ASA5510 side and vice-versa, but sometimes it seems connection cannot goes through even tunnel state showing state MM_ACTIVE. So I go into Router2801 and issue a ping (telling the source interface) to any address in any network at the ASA5510 and everything is fine again.
Router2801#ping 192.168.30.1 source 192.168.200.1
After that traffic from 192.168.30.x to 192.168.200.x is OK. The same for all other networks.
As far as I could note, from ASA side there's nothing I can do when the traffic stops flowing. At Router2801 any kind of traffic can "initiate" the flow again.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...