What firmware is the ER on? When you say the client side wanted to do VPNs again, does that mean that the clients behind the ER fail to connect to another L2TP server? Where is this server? It might help to see more of the config and the output of "show vpn ipsec sa" and "show vpn log".