can you share P2 subnet/IPs of both end, and firewall rule configured on IPSec interface - both ends,