Between the both extremities of the vpn (router to router).What do you mean by "between the server and the client" ? Is the client that same IP?
The one into the Mikrotik router.which firewall do you mean
NoHave you tried to connect with pc/laptop?
I will follow your adviceL2TP/IPSec
input: in: combo1 out:(none) src-mac: f8:66:f2:28:9a:ff proto ICMP (type 8, code 0) 46.234.125.89 > my_ip_address
denied winbox/dude connect from 5.39.218.37
Does it mean that mangle is useless if we have one ip phone and one softphone on the lan ?Mangle is a kind of 'marker' that marks packets for future processing with special marks
A bridge already exist by default (bridge1). All ports have the "S" mention.You can't do master/slave on a CCR.
You will need to create a bridge and add all the ports to that if you want to switch them. The CCR's don't have a switch chip.