15.39. Why can't my IPsec VPN clients connect from behind NAT?

That's because FreeBSD doesn't support NAT-T, which is required for IPsec to work behind NAT on the remote end.

Reference

Unfortunately, there's no way to fix that at this point. OpenVPN, which is in the current beta versions, might be a good solution.