IPIP+IPSec tunnels are still broken if the default keepalive is left enabled. If you unset the keepalive, the tunnels come right up.
I am using ROS 7.1.1 on one end and ROS 6.49.2 on the other end.
I saw this reported in the beta and it is still not fixed.