Adding a config file is a game changer. Makes it much easier than having to type complex command lines with easy to forget flags.
Not that clear, what exactly is encrypted and how to tell.
This video tutorial provide complete information to deploy and configure L2TP IPSec VPN on Windows server 2019.
See also:
https://help.keenetic.com/hc/en-us/articles/360010326360-Connecting-to-an-L2TP-IPSec-VPN-server-from-iOS
https://learn.microsoft.com/en-us/windows-server/remote/remote-access/get-started-install-ras-as-vpn
more graphical and thorough: https://www.snel.com/support/how-to-set-up-an-l2tp-ipsec-vpn-on-windows-server-2019/
Available as a Raspbian package, but may be older.
cross-platform, browser plugin available
LUKS + FreeOTFE
These are recognized by MSIE now, for error-free SSL. great for free email certs too
