[Openswan Users] ipsec tunnel can't auto delete

[netadmin for geo-nwu]

Hello everyone,I have a vpn(ipsec tunnel use x509) config is

server: openswan 2.4.4
client: ipseccmd for windows xp.

ipsec tunnel work correct and can access internel network.
when i close ipsec tunnel connection use "ipseccmd -u" at windows xp,I can't ping vpn server external ip address,
only reconnect ipsec tunnel use ipsecmd command.when i down connection use "ipsec auto --down connection-name"
on vpn server ,ping vpn server external ip address is ok.

that's why,please help me.