set protocols failover route 203.0.113.1/32 next-hop 192.168.122.1 check target '192.168.122.1'
set protocols failover route 203.0.113.1/32 next-hop 192.168.122.1 check timeout '5'
set protocols failover route 203.0.113.1/32 next-hop 192.168.122.1 check type 'icmp'
set protocols failover route 203.0.113.1/32 next-hop 192.168.122.1 interface 'eth0'

show bgp ipv4 neighbors x.x.x.x advertised-routes

vyos@r14# cat /run/accel-pppd/l2tp.conf | grep dae-s
dae-server=127.0.0.1:1700,testing123
[edit]
vyos@r14#

sudo nano -c +253 /usr/libexec/vyos/conf_mode/vpn_openconnect.py

call('systemctl restart ocserv.service')

call('systemctl reload-or-restart ocserv.service')

set firewall interface l2tp* out name 'FOO'
set firewall name FOO rule 10 action 'accept'
set firewall name FOO rule 10 protocol 'tcp'
set firewall name FOO rule 10 tcp flags syn
set firewall name FOO rule 10 tcp mss '1300'

table ip vyos_filter {
	chain VYOS_FW_FORWARD {
		type filter hook forward priority filter; policy accept;
		oifname "l2tp*" counter packets 0 bytes 0 jump NAME_FOO
		jump VYOS_POST_FW
	}
...
	chain NAME_FOO {
		tcp flags & syn == syn tcp option maxseg size 1300 counter packets 0 bytes 0 return comment "FOO-10"
		counter packets 0 bytes 0 drop comment "FOO default-action drop"
	}
}