I can't configure on on this device S2S IPSEC tunnel with these settings, on second device MR400v3 with these everything is working correctly. 

I tried also with other settings but nothing helps. 

Dead Peer Detection: ON

IPSec Connection Name: xxx
Remote IPSec Gateway (URL): xxx
Tunnel access from local IP addresses: Subnet Address
IP Address for VPN: 10.0.4.0
Subnet Mask: 255.255.255.0
Tunnel access from remote IP addresses: Subnet Address
IP Address for VPN: 10.0.1.0
Subnet Mask: 255.255.255.0
Key Exchange Method: Auto (IKE)
Authentication Method: Pre-Shared Key
Pre-Shared Key:xxx
Perfect Forward Secrecy: Enable

Mode: Main
Local Identifier Type: Local Wan IP
Local Identifier: ------
Remote Identifier Type:Remote Wan IP
Remote Identifier: ------
Encryption Algorithm: AES - 256
Integrity Algorithm: SHA1
Diffie-Hellman Group for Key Exchange: 4096bit
Key Life Time(Seconds): 28800
==Phase 2==
Encryption Algorithm: AES - 256
Integrity Algorithm: SHA1
Diffie-Hellman Group for Key Exchange: 4096bit
Key Life Time(Seconds): 3600