Got it working. Had to bridge both of the routers from the ISP. The Public IP had to be the Untangle external interface on both ends. I guess IPsec does not work when there is NATTING involved.