Setup a test box and forgot to add "interfaces=%defaultroute" and the test VPN worked.
Removed the line from the production box and it connected also.
Final configuration was simply
right=<Remote External IP>
rightsubnet=<Remote Internal Subnet>24
from all I've seen that is not suppose to work, but it does