The tunnel has to be up for you to ping it. Unfortunately the "show int tun" will always say up unless you are using keepalives. See http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t8/grekpliv.htm for the keepalive feature. With this turned on, the "show int" will show the true state