Add "force-encapsulation" option for l2tp

forceencaps = yes

/etc/ipsec.d/tunnels/remote-access

There is only for site-to-site

set vpn ipsec site-to-site peer FOO force-encapsulation enable