I found the ZyWALL USG100 which does this; at $366 a little bit more expensive than I had hoped. I want an IPSEC-over-L2TP device mostly so I can use the client integrated with Windows and also ...