Inability to start the tunnel from one end might be due to the tunnel being a dynamic-to-static tunnel, i.e. one where one of the two ends gets it's address dynamically. As a result of this, the statically addressed end would not know of the remote endpoints address and would not be able to initiate a tunnel. More information on dynamic-to-static tunnels is available at