L2TP/IPSEC VPN - MIKROTIK

Mikrotik Hap Ac2 6.48.3 – ios Client 14.6

Disable firewall rule: “deconf: drop all not coming from LAN”
/ip firewall filter
add action=drop chain=input comment="defconf: drop all not coming from LAN" \
disabled=yes in-interface-list=!LAN

Ip -> Pool
- New Pool
- Name L2TP-VPN-Pool
- Addresses: 10.10.10.2 – 10.10.10.254
- Apply – Ok

/ip pool
add name=L2TP-VPN-pool ranges=10.10.10.2-10.10.10.254
PPP -> Profiles
- Name: L2TP-VPN-Profile
- Local Address: 192.168.88.1
- Remote Address: L2TP-VPN-Pool
- Use encryption: yes
- Apply – Ok

/ppp profile
add local-address=192.168.88.1 name=L2TP-VPN-Profile remote-address=\
L2TP-VPN-pool use-encryption=yes

PPP -> Secrets

- Name: user1
- Password: 123456789
- Service: l2tp
- Profile: L2TP-VPN-Profile
- Apply – Ok

/ppp secret
add name=user1 password=123456789 profile=L2TP-VPN-Profile service=l2tp
Interface -> L2TP Server
- Enable
- Default Profile: L2TP-VPN-Profile
- Authentication: mschap2, mschap1, chap, pap
- Use Ipsec: yes
- Ipsec Secret: xxxxxxxx
- Apply - OK

/interface l2tp-server server

set default-profile=L2TP-VPN-Profile enabled=yes ipsec-secret=123456789 use-ipsec=yes