Host can't ping to gateway after creating ip sec policy

The problem is the host (10.1.202.2) is not able to ping to default gateway(10.1.202.1), after creating ipsec policy below. Otherwise, without policy, everything doing is fine. i don’t know what i missed.

/ip ipsec policy
add src-address=10.1.202.0/24 src-port=any dst-address=0.0.0.0/0 dst-port=any
sa-src-address=192.168.90.1 sa-dst-address=192.168.80.1
tunnel=yes action=encrypt proposal=default

Please help me to solve this problem.