Решено:
Исправил в
ike peer policy 1
exchange-mode main
в ike proposal 1
encryption-algorithm 3des
dh group2
authentication-algorithm sha1
authentication-method pre-share
integrity-algorithm hmac-sha2-256
prf hmac-sha2-256
в ipsec proposal policy1
encapsulation-mode transport
esp authentication-algorithm sha1
esp encryption-algorithm aes-256
в l2tp-group1 добавил
mandatory-chap
Связка L2TP over IPSEC заработала на windows 10, IOS и Android.