Read this topic first. If you encounter problems, come back here with questions. There is no need to create IPsec configuration manually - the IPsec peer created dynamically when you set use-ipsec to yes or required under /interface l2tp-server server will respond from the address on which it has received the incoming connection.