L2TP + IPSEC causes port to shut down with Bridge

RouterOS General
1

I’m attempting to have a road warrior setup that allows a client (IE myself outside my home network) VPN into my home network and act as if I’m in it to work on servers / cameras, etc. with a Mikrotik HEX.

I have L2TP with IPSEC working. I can connect to the VPN and talk to my router via my internal IP address of the router. However, I can’t talk to any of my other network computers.

I created a bridge with ARP-Proxy and assigned my PPP profile to it, which still doesn’t allow access to the other clients on my network. Then I added ether2-master to the bridge, and it all works as I want! But… after about 5-10 minutes, all my clients on Port 2 (which is connected to my wifi) are all kicked off the router and lose their addresses. The Log only reports:

defconf deassigned 192.168.40.XX from BB:BB:BB:BB:BB:BB - for all my clients on my wifi. I thought I might have a loop, but nothing about that in the logs. Any ideas what's wrong?

[code:2282vo2t]
/ppp profile
set *FFFFFFFE bridge=vpnBridge dns-server=192.168.40.1 local-address=192.168.40.1 remote-address=vpn use-encryption=default ‘VPN is a pool that isnt used for anything else’
/ppp secret
add name=loginname password=abetterpasswordthanthis profile=default-encryption service=l2tp
/interface l2tp-server server
set allow-fast-path=yes authentication=mschap2 enabled=yes ipsec-secret=mysecret mrru=1600 use-ipsec=required
/interface bridge
add arp=proxy-arp name=vpnBridge
/interface bridge port ‘With this enabled it works but kicks everyone off ether2 after about 5 minutes, while disabled I cant access local clients’
add bridge=vpnBridge disabled=yes interface=ether2-master
[/code:2282vo2t]

Thank you for any help.

2

Thank you for the help. When I compare our setups the big differences I see are with the Bridge (which is what causes my issue). In the example, the PPP Profile has no bridge assigned, the DHCP server is assigned to the bridge instead of Ether2 Master, and the MTU is set to 1500. Those are the major differences I see. It doesn’t show if the interfaces on the Port tab of Bridge are connected to the bridge that I can see.

Is there an issue with having ports 3/4/5 with port 2 as the master, and having port 2 connected to the bridge with the VPN?

What is the proper way to tie the Bridge to the VPN? Like I said it all works… for about 10 minutes… then kicks me off the ether2master port.

Edit: Thanks for your help. Your table you posted helped me solve it. It was exactly 10 minutes when we’d all get kicked off, which was my DHCP lease time. I needed to have DHCP act on the bridge, not on Ether 2 Master, then assign Ether 2 Master to the Bridge. It all makes sense now, thank you.