when i look at the ipsec counters for this tunnel, it shows that its only decapsulating/decrypting packets, and not encrypting them for the other site. i'm stumped. checked crypto maps, transform sets, ike policies, and they all match the other side. any help is appreciated.