ppp secret add name='username' password='password' service=l2tp profile=ipsec_vpn remote-address=192.168.102.2 Now, add a user and allocate an IP Address: ip ipsec proposal set default auth-algorithms=sha1 enc-algorithms=3des pfs-group=modp1024 Next, set the default encryption algorithms: ip ipsec identity add generate-policy=port-override auth-method=pre-shared-key secret='password' peer=l2tpserver ip ipsec peer add exchange-mode=main passive=yes name=l2tpserver

ip ipsec policy set src-address=0.0.0.0/0 dst-address=0.0.0.0/0 protocol=all proposal=default template=yes

You will also set the pre-shared-key secret in the process. Then you need to define the peering of IPSec and also the default IPsec policy. interface l2tp-server server set enabled=yes default-profile=ipsec_vpn authentication=mschap1,mschap2 Next, you need to add an L2TP-server interface and set the allowed authentication methods, mschap1 and mschap2. Use a 192.168.102.1 for the local address (the VPN Gateway), assuming this is not already in use. The first step is to create a PPP Profile on the MikroTik. Connect to MikroTik by using WinBox application and press New Terminal.

Mikrotik routeros vpm setup