Just as a point of reference, I’ve successfully run L2TP, IPSec and now an SSL-based OpenVPN server from behind my unlocked HG612 without any fiddling needed. The first two were on my FreeBSD server, whilst the OpenVPN server is now hosted by my pfSense-based router.
Out of curiosity, what kind of VPN does the USG provide?