> This to me suggests that hardware forwarding is broken (I assume the log > option causes punting to the CPU which allows the traffic to flow). Sounds like it. Has this worked on a previous release of the software? What is the config for the tunnel interface?