IPSsec/L2TP

RouterOS General
1

Hi guys,
experiencing issue with IPSec/L2TP (L2TPv2) road warrior.

I have an iphone and connection is established without any issue. I set up IPSec/L2TP with PSK on my PC (WIN) and i can not connect. IPSec SA is established but thats all. L2TP is not working. There is nothing not even message like “first L2TP UDP packet received from…”

i have multiple IPSec/L2TP with PSK vpns on my PC and these are working, but L2TP server is configured on MKTs with ROS v6.

I dont like V7 (like many others) but due to new MKT there is no way to install ROS v6. So. My question is why is my VPN not working on V7 OS ?

Configuration is same as on working ROS v6 MKT Routers.
Latest ROS 7.17.2 (not working on 7.16.2 as well)

Thanks in advanced.

2

Do not use IPSEC for end clients.
End-client OSs reduced support for IPSEC.
Windows makes IPSEC unusable with each patch.
Android removed IPSEC.
IPHONE - the only one who can.

If your Mikrotik device supports Back-To-Home (since 7.12 for ARM and ARM64)- upgrade to latest ros7 and enable it with just 2 clicks thru winbox GUI and forget about IPSEC.
Back-to-home easily connects on Android and iPhone app with 1 shot of QR. (Google Play and AppStore links: https://mikrotik.com/bth/)
Back-to-home (as it is wireguard) easily connects on Windows PC with Wireguard app (import text file config).

list of devices that support BTH:
https://mikrotik.com/products/group/wireless-for-home-and-office?filter&s=c&a=["arm","arm64"]#!

3

Thanks for your reply.

I will not use L2TP without IPSec… Dont want to have unprotected payload…
WireGuard is out of options…

So.. in order to make it work i need to go under 7.12 ROS ?

4

L2TP/IPsec does work on 7.16.2 so the issue must be something in the configuration or the Windows may have another glitch. Please post the export of the configuration, of course after obfuscating any sensitive information.