Hi spuluka / rsuraj,
First of all thanks for your all feedback. My problem solve after i enable source-nat address persistent with enable alg for ipsec.
just addtional question, is it best practice to made NAT source address-persistent or also have disadvanatges using this feature?
Thanks