Cisco ASA VPN Uptime

sh vpn-sessiondb l2l

Locate the index of the session you want to disconnect, then

vpn-sessiondb logoff index <session_index>

Remove the following from your ASA

route outside 172.16.20.0 255.255.255.0 a.a.a.a 1

By having this route statement in place the ASA will not be able to send or return traffic through the tunnel.

Additionally, you define your "to protect/interesting" traffic in the following ACL which is referenced in your crypto map.

access-list outside_1_cryptomap extended permit ip 172.16.10.0 255.255.255.0 172.16.20.0 255.255.255.0

Your nat exemption/identity is interesting when looking at the crypto map match ACL above.

object-group network DM_INLINE_NETWORK_1
 network-object 172.16.20.0 255.255.255.0
 network-object 172.16.200.0 255.255.255.0
access-list 80 extended permit ip 172.16.10.0 255.255.255.0 object-group DM_INLINE_NETWORK_1 
access-list 80 extended permit ip 172.16.10.0 255.255.255.0 172.16.20.0 255.255.255.0 
nat (inside) 0 access-list 80

Your access-list 80 has redundant matches in it. Line 1 of the ACL, when the object-group is expanded -- will match line 2 of the ACL. Redundant and should probably be fixed, but not likely the cause of any problems here.