L2TP/IPSec behind NAT

RouterOS General
1

Hi! Founded old Topic

http://forum.mikrotik.com/t/vpn-with-l2tp-ipsec-problem/75760/3

Is this limitation fixed. I’ve got RouterOS 6.33 and still can’t connect more than one user from the same LAN under the NAT to remote Mikrotik VPN.

2

Anyone! Please answer my question!

3

Not implemented. Most likely you will have to wait ROSv7

4

Finally! A straight answer! Thank you)
It is sad, but I’ll wait for v7.
Thank you again.

5

Hi! RouteOS 38.1.
Anything change?
Can more then one user connect from the same nat?

6

No, there still is no RouterOS v7 so we are still waiting for all the magic improvements.

7

v6.38 and newer can have more than one client behind the same public IP if L2tp client is using random source port.

8

How to do it? I do: IPSec-peer-generate policy-> port strict, but nothing changed.

9

I have to say, I am really disappointed that this issue is still not fully fixed.

I’ve just tested that multi-device connectivity worked with one iPhone and One Android device connected, when I connected a second android device, the first was no longer able to pass traffic.

Now, perhaps this is an Android bug, but it would take a really long time for me to test that myself.

Can anyone else reproduce this behaviour?

10

I have to rescind this, it was just that iOS fell back to the non-VPN connection for internet access. An IP Tools based ping to the VPN LAN Gateway address failed as soon as another client connected.