The ISP is doing NAT, for me as they choose to use private range for wan connection. I am using a loopback interface to source vpn, but my packets still fail and I get %CRYPTO-4-RECVD_PKT_MAC_ERR: decrypt: mac verify failed for connection on the remote side.