> $ ping -c5 10.2.0.1 > PING 10.2.0.1 (10.2.0.1): 56 data bytes > Request timeout for icmp_seq 0 > Request timeout for icmp_seq 1
My guess: your ICMP ECHO REQUESTs are sent from the "wrong" source address and don't even make it into the tunnel. I'd enforce the proper source address like this: ping -I 10.2.0.42 -c5 10.2.0.1 (or whatever the appropriate OS-X/macOS option for this is these days.) +1 for tcpdumping this. Martin Neitzel