use IPsec Xauth can not use network

[zll123dxd]

Sorry to bother you ,

I had an issue a long time ago , I'm trying to customize android to make hotspot share vpn network. Now i'm done ,
There is no problem using pptp, L2tp psk/rsa and third-party vpn applications for testing.
But when using IPsec Xauth PSK/RSA, client cannot access the network.

I'm sorry, but I don't have a rootable device.
IPsec Xauth PSK/RSA uses tun0 interface ,
I constructed the routing table as follows :
18000: from all iif wlan0 lookup tun0
iptables nat : -A tetherctrl_nat_POSTROUTING -o tun0 -j MASQUERADE
iptables filter :
-A tetherctrl_FORWARD -j bw_global_alert
-A tetherctrl_FORWARD -i tun0 -o wlan0 -m state --state RELATED,ESTABLISHED -g tetherctrl_counters
-A tetherctrl_FORWARD -i wlan0 -o tun0 -m state --state INVALID -j DROP
-A tetherctrl_FORWARD -i wlan0 -o tun0 -g tetherctrl_counters
-A tetherctrl_FORWARD -i tun0 -o wlan0 -j ACCEPT
-A tetherctrl_FORWARD -j DROP
-A tetherctrl_counters -i wlan0 -o tun0 -j RETURN
-A tetherctrl_counters -i tun0 -o wlan0 -j RETURN

The client side can't even ping the ip of tun0.

I'm very sorry .
Could you please provide a copy of the routing table and iptables when connecting to VPN (IPsec Xauth PSK) and using MyGod to enable VPN sharing, I hope to find the problem with reference to it ?

Thanks