I am currently Looking into a way to change this in the backend using the CLI. Any help from TP link would be great

I have noticed on the ER605/ER7206/ER707-M2 that when you enable L2TP it auto creates a IPsec tunnel. Sadly it defaults to the SHA1 algorithms I have also noticed it does this by default for OPEN VPN...