OK, I did a little more troubleshooting, and here's what's going on...
On my topology map, in the "VPN Client / Ubuntu" box, which is now pfsense, I can see ping's on eth1, but I do not see them getting forward to eth0 to subnets other than vlan140. So, somewhere, the connection breaks from eth1 to eth0 on the VPN Client. I tried to add a route, but I'm not exactly sure what the router for the ipsec tunnel is.
Another thing is that in the ipsec configs, I have a "phase 2" network of 192.168.140.0/24. If I try to add another 'phase 2' network of 192.168.1.0/24, that network doesn't connect and errors out on the ipsec VPN server. I also checked and firewall rules are NOT blocking the traffic. I set the rules to log, and I can see the icmp ping, and it's passing.
I believe it's a routing problem now. But, how in the world do you add a route to another network on an IPSEC tunnel? I also tried to use the ipsec endpoint IP as the router/gateway, but no dice.