What procedure within the 2927ax to follow so as to allow a Windows VPN client?
Thanks.

Hi evy,

There are many options here , although I've always struggled to get an IPSec connection to work with the Windows native options, so always end up using the DrayTek 'Smart VPN Client' via SSL connection, I use it a fair bit actually, and once you get used to it, it's pretty solid!

Thank you Sir. Will try both methods.

I assume the 2927 currently supports it (2865's do now), but do yourself a favor and use WireGuard. After trying most of the other protocols, I am currently using WireGuard from Windows to a Draytek, and am very happy with it.

Setup is quite simple once you get used to it as well.

I would recommend using the Smart VPN client with IKEv2 EAP or OpenVPN as it supports 2FA using TOTP codes.
There are a lot of attacks on VPN endpoints at present so you can't be too careful with security.  
On that topic and with Drayteks track record I would personally avoid SSL 

…alternatively, you could consult this chart and decide on the protocol that best suits your needs/wants:

https://www.draytek.co.uk/support/guides/kb-best-vpn-protocol

I agree though, going for the best security should be everyone’s priority.