I have same case.
I set-up IPSec Tunnel over IPv6 addresses
I see SA's, but bytes counters is 0
In policy i have required encrypt for all protocols.
M.b. i wrong in protocol and need set some other value, not 255?
Why?Don't do full tables on CCRs. They are terrible at it.