https://blog.it-kb.ru/2015/01/21/windows-server-2012-r2-remote-access-configure-l2tp-ipsec-vpn-server-in-nlb-cluster-with-two-factor-authentication-based-on-user-domain-account-and-computer-certificate-with-nps-radius-authorization/