https://help.ubnt.com/hc/en-us/articles/115012408087-EdgeRouter-Site-to-Site-IPsec-VPN-to-pfSense
EdgeRouter X:
Peer: IP Address/FQDN of EdgemarcDescription: As appropriateLocal IP: IP Address of EdgeRouter X, or anyEncryption: AES-128Hash: SHA1DH Group: 2Pre-shared Secret: <secret>Local subnet: LAN IP block of EdgeRouter XRemote subnet: LAN IP block of EdgemarcEdgemarc:
Name: As appropriateEnabled: CheckedShared Secret: <secret>Local VPN Gateway: WAN_IPProtected Local Network: LAN IP block of EdgemarcRemote VPN Gateway: IP Address/FQDN of EdgeRouter X, or %anyDH Group: 2Phase 1 Encryption: AES128Phase 1 Hash: SHA1Phase 2 Encryption: AES128Phase 2 Hash: SHA1Phase 1 Lifetime: 28800 secondsPhase 2 Lifetime: 3600 secondsPerfect Forward Secrecy: CheckedEarly Start: CheckedKeepalive Ping configured as appropriate.