Sure you can do L2TP/IPsec with tunnel mode......... I also believe that transport mode is not worth the trouble, but other people disagree.