Site to site between 892s, video streaming, fragments and dropped traffic

Question

Customer network consists of two LANs, each routed from an 892.  The 892s are connected by a Gig fiber path, and there's an IPSec VPN between the 892s.  All traffic from one LAN to the other traverses the VPN.  Site 1 has a Lenel video server with a bunch of cameras streaming video to it.  Site 1 and Site 2 each have a Win7 PC with some Lenel software that receives video streams retransmitted from the video server at Site 1.  The video server streams the video as UDP.   The client PC at Site1 receives all the video streams from the server just fine.  The client PC at Site 2 does not reliably receive the video streams from the server at Site 1.  Streams from *some* cameras are received fine, but not others.  Looking at Wireshark captures taken at Site 1, it looks like most of the UDP traffic is fragmented.
Anyone else out there have anything remotely like this setup, and any notions of where to go looking for why Site 2's got such issues?
I'm afraid I'm somewhat constrained by all sorts of legal and bureaucratic restrictions on exactly what configuration and sample data I can include in this discussion, which would make me laugh if it wasn't so frustrating (this is a network of security cameras around a sensitive research facility).

Answer 1

Hi Julio,
Everything seems to be ok in this access list. I think this is a routing issue. It is just does not know where to send the packet back or where to reply.
Crypto map tag: XXXX_map, seq num: 7, local addr: x.x.x.x
   access-list XXXX_7_cryptomap permit ip x.x.x.x x.x.x.x x.x.
x.x x.x.x.x
   local ident (addr/mask/prot/port): (local network and subnet)
   remote ident (addr/mask/prot/port): (Remote network and subnet)
   current_peer: x.x.x.x
   #pkts encaps: 0, #pkts encrypt: 0, #pkts digest: 0
   #pkts decaps: 9122, #pkts decrypt: 9122, #pkts verify: 9122
   #pkts compressed: 0, #pkts decompressed: 0
   #pkts not compressed: 0, #pkts comp failed: 0, #pkts decomp failed: 0
   #pre-frag successes: 0, #pre-frag failures: 0, #fragments created: 0
   #PMTUs sent: 0, #PMTUs rcvd: 0, #decapsulated frgs needing reassembly: 0
   #send errors: 0, #recv errors: 0
   local crypto endpt.: x.x.x.x, remote crypto endpt.: x.x.x.x
   path mtu 1500, ipsec overhead 58, media mtu 1500
   current outbound spi:
inbound esp sas:
   spi:
       transform: esp-des esp-md5-hmac none
       in use settings ={L2L, Tunnel, }
       slot: 0, conn_id: .., crypto-map: xxxx_map
       sa timing: remaining key lifetime (sec): 18731
       IV size: 8 bytes
       replay detection support: Y
outbound esp sas:
   spi:
       transform: esp-des esp-md5-hmac none
       in use settings ={L2L, Tunnel, }
       slot: 0, conn_id: 8849, crypto-map: xxxx_map
       sa timing: remaining key lifetime (sec): 18673
       IV size: 8 bytes
       replay detection support: Y