edgerouter-vpn

 ipsec {
     ipsec-interfaces {
         interface eth0
     }
     nat-networks {
         allowed-network 10.0.27.1/24 {
         }
         allowed-network 192.168.4.1/24 {
         }
     }
     nat-traversal enable
 }
 l2tp {
     remote-access {
         authentication {
             local-users {
                 username ubnt {
                     password anotherpass
                 }
             }
             mode local
         }
         client-ip-pool {
             start 192.168.4.150
             stop 192.168.4.160
         }
         dns-servers {
             server-1 8.8.8.8
             server-2 8.8.4.4
         }
         ipsec-settings {
             authentication {
                 mode pre-shared-secret
                 pre-shared-secret vpn123
             }
             ike-lifetime 3600
         }
         outside-address 10.0.27.1
         outside-nexthop 10.0.27.253
     }
 }