When you setup a GRE tunnel through an existing ipsec – the keepalives should be turn off , if you turn on keepalives the tunnel will never be up