If I am correct in assuming that you are trying to encapsulate L2TP with an IPSEC connection, there are some ports you will need to open. They are as follows:

IKE (UDP-500) *Assuming you are...