Configuring L2TP / IPSec client

Hello all,

I’m trying to configure a RB951Ui-2HnD (RouterOS 6.12 / Firmware 3.14) as an L2TP/IPSec client as follows:


VPN Server (non-MikroTIK) — Internet — Cable router ---- MikroTIK Router (L2TP/IPSec client)


In order to figure out the VPN parameters, I set up a Windows 7 PC as the VPN client as follows:


VPN Server (non-MikroTIK) — Internet — Cable router ---- Windows 7 PC


The VPN was successfully established with the following parameters:

  • Enable LCP extensions
  • Type fo VPN → Layer 2 Tunneling Protocol with IPsec (L2TP/IPSec)
  • Authentication → Use preshared key for authentication
  • Encryption → Require encryption (disconnect if server declines)
  • Authentication → MS-CHAP v2

Once that was out of the way, I tried to configure the same parameters on the VPN client in MikroTIK. This is what I configured:

/interface l2tp-client
add add-default-route=no allow=mschap2 connect-to=<VPN_SERVER_IP> dial-on-demand=no disabled=no keepalive-timeout=60 max-mru=1450 max-mtu=1450 mrru=1600 name=\
    L2TP_VPN password=<PASSWORD> profile=default user=<USERNAME>

/ip ipsec proposal
set [ find default=yes ] enc-algorithms=3des pfs-group=none

/ip ipsec peer
add enc-algorithm=3des nat-traversal=yes secret=<PRESHARED_KEY>

Unfortunately that didn’t work. This is what the log file says:

may/10 22:45:04 l2tp,ppp,info L2TP_VPN: initializing... 
may/10 22:45:04 l2tp,ppp,info L2TP_VPN: connecting... 
may/10 22:45:06 l2tp,ppp,info L2TP_VPN: authenticated 
may/10 22:45:06 l2tp,ppp,info L2TP_VPN: connected 
may/10 22:46:11 l2tp,ppp,info L2TP_VPN: terminating... - session closed 
may/10 22:46:11 l2tp,ppp,info L2TP_VPN: disconnected 
may/10 22:46:11 l2tp,ppp,info L2TP_VPN: initializing... 
may/10 22:46:11 l2tp,ppp,info L2TP_VPN: connecting... 
may/10 22:46:13 l2tp,ppp,info L2TP_VPN: authenticated 
may/10 22:46:13 l2tp,ppp,info L2TP_VPN: connected 
may/10 22:47:18 l2tp,ppp,info L2TP_VPN: terminating... - session closed 
may/10 22:47:18 l2tp,ppp,info L2TP_VPN: disconnected

Could someone give me a hand? I’m completely new to MikroTIK…

Thanks in advance!

There are bugs associated with RouterOS v6.12 relating to L2TP…see here: http://forum.mikrotik.com/t/known-issues-and-bugs-a-list/71473/1

Isn’t that bug affecting only the L2TP server? I’m trying to use MikroTIK as the client.

Your log shows the behavior problem similar to what the server is doing so I mentioned.

doesn’t look like it’s fixed in 6.13 - just tested it in 6.13 and no good.

seems to still be broken in 6.15

You dont have an IPSec policy from what I can see.

Watch this presentation, a complete setup for a client is there:
http://tiktube.com/video/mIgH3hmodoLHnHDGCnqwpsLtKlGonDpI=