On the HE site, after you login, in the Tunnel Details section, there is an option to "rebuild" the tunnel, this might fix the problem. Beyond that I would email HE, send them the relative info and ask them to look at it. Your side looks correct.