It works on the existing VPN because esp in tunnel mode is working. See the diagram I posted. The 10.x destination is fully encapsulated.
On the VPN where it is NOT working, there is something wrong with the tunnnel. Compare the outputs of the SA and Flow reports from ipsecctl(8).
|