Zhao, I see you at least have iptables enabled. Unfortunately, I am not a whiz with iptables or selinux. Can you temporarily disable them both to see if the esp packets are being blocked? If the situation does not improve, at least you will have eliminated them as possible causes of your problem. Thanks, -Matthew