@HeungBum 

Can you show your VPN configuration please?

Blur out any sensitive data.

Cheers

  @HeungBum 

No, there is nothing you can do about it on IPSec, if the clients need to have access to the internet, you must use OpenVPN/Wireguard/SSL VPN or L2TP.

@RaRu; @MR.S

now I can access the internet after I set the Local network Type to custom IP and 0.0.0.0/0

I can use internet in my mobile android phone and can access the local network either.

  @HeungBum 

Wow, did it work? There have been several issues about this on the forum before. I haven't tested it myself but then you have a solution.

  @HeungBum 

What type of encryption does the phone connect with? I have controler and can't choose more than one encryption. I thought I'd test it out a bit.

  @MR.S 

I think the issue here was that he could connect to IPsec VPN, and LAN access worked but not WAN. 

It was not about routing whole internet traffic via VPN, it wor about having an internet on client at all.

IMO the problem could have been with subnet. The declarated subnet of IPsec configuration was the same as actual subnet of Client's network and that generated a problem for client after connecting to the VPN (LAN worked but WAN was not).