Thanks.
I add the "next-hop trunk" route (manual p. 89) and it works!
Now the Google DNS 8.8.8.8 is also ok.
Next question: Is it possible to keep the VPN (Android 4.1.1)?
Keep Alive Timer: 60 s (drops after 4 min)
Keep Alive Timer: 180 s (drops after 5 min)
Keep Alive Timer: 180 s plus Email-Check every 5 min (drops after 8 min)
This is to short for me.