@shahidge4 The tcpdump from WAN is pretty useless, since the connection is established already. Your P2 has a single remote IP. So the VPN will only allow access to this one. Do a packet capture on the IPSec interface. Ensure that the remote host does not block access from the remote network.