@stephenw10 Thanks. Figuring out what those units are capable of has been somewhat difficult. TP-Link support hasn't been very helpful. These are a consumer-grade product so I'm working with that level of support techs - and this is more of a business application.

Well according to this documentation NHRP via FRR is not available for FreeBSD. 😞

http://docs.frrouting.org/en/latest/overview.html#feature-matrix

When you said Meraki mesh, I assume you have multiple sites using Meraki? If so, you need to make sure your local pfsense has ipsec to the site where the 10.1.0.0/24 subnet is.