Hello,
After a few recent changes on the firewall, one of our Site-to-Site VPN connections is experiencing one-way traffic.  The VPN connection actually connects two IP addresses on our side with a subnet on the other.  Because of the two IP Addresses on our side, two IPSec tunnels are setup.  One experiences full two-way traffic.  The other only receives traffic.  All traffic from our network destined for the second tunnel is dropped.  I have done a sniff on the traffic and can see it coming in on our DMZ interface.  I even setup the exact scenario for the packet tracer and it showed everything coming out ok.
I feel it important to mention that the firewall does see the VPN connection as up and running and there is no problem with the first IPSec tunnel.  The problem is that the firewall is dropping packets that should go out on the second tunnel.


Result of the command: "sh crypto ipsec sa detail"

interface: Outside
    Crypto map tag: Outside_map, seq num: 6, local addr: 100.2.84.146

      access-list Outside_cryptomap_6 permit ip host 100.2.83.42 172.31.67.0 255.255.255.192
      local ident (addr/mask/prot/port): (100.2.83.42/255.255.255.255/0/0)
      remote ident (addr/mask/prot/port): (172.31.67.0/255.255.255.192/0/0)
      current_peer: 200.115.231.131

      #pkts encaps: 620, #pkts encrypt: 620, #pkts digest: 620
      #pkts decaps: 343, #pkts decrypt: 343, #pkts verify: 343
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 620, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #pkts no sa (send): 0, #pkts invalid sa (rcv): 0
      #pkts encaps failed (send): 0, #pkts decaps failed (rcv): 0
      #pkts invalid prot (rcv): 0, #pkts verify failed: 0
      #pkts invalid identity (rcv): 0, #pkts invalid len (rcv): 0
      #pkts replay rollover (send): 0, #pkts replay rollover (rcv): 0
      #pkts replay failed (rcv): 0
      #pkts min mtu frag failed (send): 0, #pkts bad frag offset (rcv): 0
      #pkts internal err (send): 0, #pkts internal err (rcv): 0

      local crypto endpt.: 100.2.84.146, remote crypto endpt.: 200.115.231.131

      path mtu 1500, ipsec overhead 58, media mtu 1500
      current outbound spi: 53057DFB

    inbound esp sas:
      spi: 0x002FA852 (3123282)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 2461696, crypto-map: Outside_map
         sa timing: remaining key lifetime (sec): 24919
         IV size: 8 bytes
         replay detection support: Y
    outbound esp sas:
      spi: 0x53057DFB (1392868859)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 2461696, crypto-map: Outside_map
         sa timing: remaining key lifetime (sec): 24919
         IV size: 8 bytes
         replay detection support: Y

    Crypto map tag: Outside_map, seq num: 6, local addr: 100.2.84.146

      access-list Outside_cryptomap_6 permit ip host 100.2.83.43 172.31.67.0 255.255.255.192
      local ident (addr/mask/prot/port): (100.2.83.43/255.255.255.255/0/0)
      remote ident (addr/mask/prot/port): (172.31.67.0/255.255.255.192/0/0)
      current_peer: 200.115.231.131

      #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
      #pkts decaps: 506, #pkts decrypt: 506, #pkts verify: 506
      #pkts compressed: 0, #pkts decompressed: 0
      #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
      #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
      #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
      #pkts no sa (send): 0, #pkts invalid sa (rcv): 0
      #pkts encaps failed (send): 0, #pkts decaps failed (rcv): 0
      #pkts invalid prot (rcv): 0, #pkts verify failed: 0
      #pkts invalid identity (rcv): 0, #pkts invalid len (rcv): 0
      #pkts replay rollover (send): 0, #pkts replay rollover (rcv): 0
      #pkts replay failed (rcv): 0
      #pkts min mtu frag failed (send): 0, #pkts bad frag offset (rcv): 0
      #pkts internal err (send): 0, #pkts internal err (rcv): 0

      local crypto endpt.: 100.2.84.146, remote crypto endpt.: 200.115.231.131

      path mtu 1500, ipsec overhead 58, media mtu 1500
      current outbound spi: 72EF738F

    inbound esp sas:
      spi: 0x9AD26245 (2597478981)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 2461696, crypto-map: Outside_map
         sa timing: remaining key lifetime (sec): 26285
         IV size: 8 bytes
         replay detection support: Y
    outbound esp sas:
      spi: 0x72EF738F (1928295311)
         transform: esp-3des esp-md5-hmac none
         in use settings ={L2L, Tunnel, }
         slot: 0, conn_id: 2461696, crypto-map: Outside_map
         sa timing: remaining key lifetime (sec): 26285
         IV size: 8 bytes
         replay detection support: Y

Result of the command: "sh crypto isakmp sa"

   Active SA: 1
    Rekey SA: 0 (A tunnel will report 1 Active and 1 Rekey SA during rekey)
Total IKE SA: 1

1   IKE Peer: 201.116.232.132
    Type    : L2L             Role    : responder
    Rekey   : no              State   : MM_ACTIVE


Thanks for your help,
Danny