Hi, i have a huge problem. I couldnt update my hap Lite as it says there wasn't enough space available, and so I was pointed to use netinstall. I did (several times now), and netinstall always shows the device, I select the SMIPS main package, it formats, installs, and says ready. However, after tha...

It seems to be the NordVPN endpoint that is crappy. They also said they are going to drop support for L2tp/IPsec in the upcoming months.
I tried ExpressVpn now and there the L2TP/IPsec works fine from the start. It seems they are a lot slower, though..

Do you see different behaviour with and without that output reject rule? (you can disable/enable things in the webfig by clicking the small box with a D or E in it, or using the checkmark/X on the winbox GUI) I need to do more tests for that. My question is, how can I determine for sure whether the...

Yes. I deleted the IPsec secret in my L2TP interface and unchecked the Use IPsec checkbox (I am more the UI clicky type of user ).

The IPsec settings on the L2TP interface are disabled now. But now I have the same problem as before: IPsec seems to work (telling from the log), but the L2TP connection says: tunnel 7 received no replies, disconnecting tunnel 7 entering state: dead session 1 entering state: dead myvpn: terminating....

Okay... they got back to me, but now I am a bit confused. They said, in order to connect to their service using L2TP/IPsec I should do the following: /ip ipsec peer add address=serveraddress auth-method=pre-shared-key secret=key exchange-mode=main-l2tp hash-algorithm=sha1 enc-algorithm=3des dh-group...

Hi, actually NordVPN with RoS 6.38.5, I have this : - L2TP / IPSEC , is working great, this is what I use actually . Don't ask me for performance, My xDSL connection is so bad that I can't overload the CPU ;( Hope this helps Hello Gartox, may I ask what you did to enable L2TP/IPsec with NordVPN? I ...

Thanks. I requested detailed information from the VPN service provider.

I'm no IPSec expert, but it's going for phase 2, so fiddling with proposal settings (the one named "default" in IP->IPSec->Proposals) might help. Default in RouterOS is sha1 and aes cbc. NordVPN in their tutorials advertises L2TP/IPSec even for Windows XP, so if they require something els...

Good thing is that you have plan B and can always try something different, e.g. SSTP should be very easy. Or you can experiment with IKEv2, it's modern, also quite new in RouterOS, so you can get that nice pioneer-like feeling it you make it work. :) I don't see IKEv2 when I want to do /interface a...

@Sob Thanks. I activated some logging, and did see something. See below. @pe1chl I sadly have no clue what the other side uses as vpn server / router. Its a commercial VPN service (nordvpn). Here's my config: /interface l2tp-client add connect-to=xyz.nordvpn.com ipsec-secret=secret name=myvpn passwo...

Hi, I have a little problem with my hAP lite and a VPN connection that should be established from my router. I have the choice between OpenVPN (only with TLS auth, which, as I understand, is not yet supported by RouterOS), PPTP, SSTP, IKEv2/IPSec and L2TP/IPsec. I wanted to go for L2TP/IPsec. When I...

Ah, thank you a lot. I suppose I now understand what happens here. For the marking and the actual routing to work, I had to change something, though. I now have the bridge NAT rule that redirects all from ether4 to !192.168.178.0/24 (everthing not in my local network). However to actually mark the p...

Hello Sob, Thanks for your answery, but I'm afraid I'm still missing a piece of the puzzle. I have your bridge entry in place, but that only seems to be the first step. You said 'and then you can process them'. This is probably the step I'm struggling with the most. How do I process them now, after ...

Hello, this is my current config of my hAP lite. As you see the config is pretty basic. I have another router in my network (192.168.178.1) that does DHCP and provides internet connectivity. The ether1 is the uplink to this router. All devices connected to ether2, ether3 and the wlan should be in th...

Hello, I just got my hAP lite, and I must say I am a bit overwhelmed by the options ;-) I must say I am a software dev and not a network specialist, so I can help myself around basic network stuff, but this seems a bit more complex than I can currently handle. So I need some help / advice. I get my ...

Hello, I plan on getting a MikroTik RouterBoard hAP lite. I want to mainly use it as a switch and wireless access point. One ethernet port (likewise the first) will be the uplink to my main router that connects to my ISP. The other ethernet ports will be for some devices. Now, I want for one device ...