10-12-01 0.0.0.0
10-12-02 255.0.0.0

If your PFSense or Datto isn't a layer 2 switch DIFFSERVE won't work and you will have to use QOS is the switch allows for it. Also, I am assuming you are G7.11 as codec. Make sure this is fixed. You will also need to check if you or they are using large packets. Seriously though if all else fails turn all this crap off because it may be causing more issues than helping it something isn't compatible. 2 calls 9 phones? Shouldn't need anything and in fact probably ZERO reason to have the networks separated.