IPSEC site to site, remote private network behind a NAT

[smitopher09]

I have setup a site to site between pfSense and a Ubiquity EdgerouterX
The ER X is behind an ISP NAT and does not have a public ip address. They will only offer me a public address for a 400% price increase.

My home pfSense site is in Austin, Texas. Running 2.4.4-RELEASE. Just updated. no change in behavior from previous release
My remote ER X site is in the Philippines

I followed the recipes found at
link EdgeRouter-IPsec-Site-to-Site-VPN-behind-NAT
link EdgeRouter-Site-to-Site-IPsec-VPN-to-pfSense
and
link configuring-a-site-to-site-ipsec-vpn.html

I can now access any host on the pfSense network from the ER X network .
I can not access any host on the ER X network from any host on the pfSense network

Am I missing something on my pfSense config

The ER X config
image url)
pfSense Phase 1

pfSense Phase 2

[Alitai]

Without a public ipv4 address i see no chance.