Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We can establish tunnel with ESP or AH alone,it is not required to use both, the only reason you would like to use both for tunnel is to have additional security .
Found this message in the logs : vendor ID seems Unity/DPD but major 19 mismatch. Probably you can try disabling the vendor ID and DPD on both the units.