Service Mesh tunnels showing in down state.
This can be caused by UDP port 4500 being blocked.
Ensure that UDP port 4500 is unblocked.
You may rerun the Service Mesh diagnostics to validate this.