Thank you so much. You are so helpful! I think my problem may be that my Peplink Balance 30 doesn’t remote user auth via LDAP/RADIUS. When I navigate there, I do not even see a setting for authentication,
Reading through this thread, Radius auth for PPTP/L2TP VPN - #4 by sitloongs, it appears that the Balance 30 just can’t do it.