I have noticed on the ER605/ER7206/ER707-M2 that when you enable L2TP it auto creates a IPsec tunnel. Sadly it defaults to the SHA1 algorithms I have also noticed it does this by default for OPEN VPN...