If you have LB configured you need to run following script in order for VPN to work, it'll add appropriate routes to LB WAN tables for ingress VPN traffic to reach local LAN. This issue is currently tracked in bug log with UBNT.
/usr/sbin/ubnt-add-connected.pl