When you said Meraki mesh, I assume you have multiple sites using Meraki? If so, you need to make sure your local pfsense has ipsec to the site where the 10.1.0.0/24 subnet is.
Update 2:
Added an alias for RFC1918 networks and configured an outbound NAT rule with RFC1918 as source and any destination on all pfSenses.
This solved what seemed like a routing problem but turned out to be a NATing problem.
However I'll probably have issues if/when I have multiple WAN connections.
Still would like to hear if there are any best practices.
We're also experiencing this issue (https://forum.netgate.com/topic/164671/bug-dhclient-flushes-static-routes). Our current theory is that the DHCP client is to blame.
A workaround it so go static: set the interfaces configuration to static and also set the gateway manually. We stopped having this issue after that.
Hey
And why is outgoing NAT used ?
Try disabling it . I have a similar scheme and everything works fine without NAT.
The question such, Pfsense can ping a host 10.1.1.20 ?