Matt Eaton, can this be set back at all? we have many customers using older routers that do not support this. Still the same on iOS 14.1 I was really hoping for a change on this.

Draytek have no plans to update this for the older routers 2820 model. I can connect to the newer models of Draytek's 2860 e.t.c. I'm sure there are plenty of older routers that would not support this. Could this get changed back at all Apple and everyone should be happy:) ? Especially with a lot of people trying to work from home at the mo. "This will need to be resolved by the server administrator. We have upgraded the proposed ciphers in L2TP IPsec VPN to also propose SHA-256 for the Child SA in IPsec. The issue seems to be that the server is accepting SHA-256 cipher for the child but maybe dropping the ESP encrypted packets with SHA-256 HMAC. This maybe because the server is assuming a SHA-256 HMAC with 96 bits instead of the standard 128 bits. Switching the SHA-256 HMAC output from 96 to 128 bits should fix this issue."

Same issue here when trying to a Draytek 2820 that worked fine on 13.7. It does work fine on other L2TP VPN’s I have setup with other routers, mainly Draytek 2860’s. iPhone 11 & iPhone 7