I think i'm late for two weeks with answer. Sorry. But anyway...
It's all about release i've tested.
If red is static - it's all right. If red is dhcp, i can't choose it in ipsec settings. But! If first i set red to static and save changes, then change red back to dhcp, i get possibility to choose red dhcp in ipsec. I tested this in virtual (VirtualBox) and physical environment.
And i tryed to do as written before (again virtually and physically):
- define the vpn selecting the green Local IP edit /etc/ipsec.conf
- change left=green_ip with left=%eth1, where eth1 is red dhcp interface.
It doesn't work. Tunnel satays down, any changes of .conf are not effective. And after changing conf GUI settings was like before.
And i tryed to connect NS with pfSense via IPSec - successfully. Tunnel was stable. ping was short.