IPSec Installed-sa

RouterOS Beginner Basics
1

Does this looks like established IPSec VPN?

[admin@MikroTik] /ip ipsec> installed-sa print 
Flags: A - AH, E - ESP, P - pfs 
[admin@MikroTik] /ip ipsec> installed-sa print 
Flags: A - AH, E - ESP, P - pfs 
 0 A  spi=0 src-address=xxx.xxx.xxx.xxx dst-address=xxx.xxx.xxx.xxx  
      auth-algorithm=none enc-algorithm=none replay=0 state=larval 
      add-lifetime=1h/1h30s use-lifetime=1h/1h lifebytes=0/0 
[admin@MikroTik] /ip ipsec>

IP addresses sanitized.

I am unable to ping host on other side of IPSec VPN and just wondering if this print guaranties that IPSec VPN channel is established (or this does not necessarily mean that - maybe missing something? ).?
Please advise.

2

No it doesn’t look right, try enable ipsec logging

/system logging action add memory-lines=100 memory-stop-on-full=no name=ipsec target=memory
/system logging add action=ipsec disabled=no prefix="" topics=ipsec

and check the log.

3

On remote server ping at some point there is an entry in log:

malformed cookie received or the spi expired

Any thoughts or ideas?