I had this problem, maybe this hint will help.Beside of having the access list for the tunnel, you also must configure an ACL to let the traffic flow on the other side. You put an ACL like ...access-list OUTBOUND permit ip 10.30.0.0 255.255.0.0 10.3...