one way traffic between Unifi USG and pfsense ipsec

[lgreytak]

USG lan = 10.7.1.1 /24
pfsense lan = 10.5.1.1 /20

i have rules to allow traffic both ways in pfsense

i can ping from USG lan to pfsense lan fine and to all hosts (quickly too), but i cannot access any hosts the other way, including pinging from the pfsense itself using ping diagnostic tool.

the only red herring i've got so far is it seems to be kicking my ping out to the internet at some point but i dont know what to make of this, to be fair when i look in routes i dont have ones for the usg lan but ipsec makes its own right?

see how in routes it skips right over the remote rubnet:

context in case needed:

[lgreytak]

this is still a issue

[lgreytak]

still a issue....