L2tp ipsec vpn network with user connection problems

Hello, thank you for your help with the following problem.
I have v 7 routers and there I configured an L2tp ipsec VPn network with a pre-shared key.
The vpn works correctly and they connect, but the problem happens to me when more than 1 user, in this specific case, 2 users who connect from the same physical site to the vpn, if there is already a connected user, the one who connects disconnects the previously connected user.

Yes, that is typical L2TP VPN NAT-related behaviour. The issue is related to how NAT (and also CG-NAT) handle UDP packets by default and there is no easy fix for it (The NAT/CG-NAT person has to specifically configure their system to overcome the issue but I don’t have any instructions on the required settings).

You have a couple of options available:

  1. Use a site-to-site VPN for where those 2 users are,
  2. Use a different VPN solution such as OpenVPN (on TCP) or WireGuard (I don’t know how well WireGuard handles NAT/CG-NAT).


Backups are your friend. Always make a backup!

/system backup save encryption=aes-sha256 name=MyBackup

Please, export and attach your current config to your post if you want help with a config issue:
/export hide-sensitive file=MyConfig/export file=MyConfig

A similar problem here (and solution).

http://forum.mikrotik.com/t/l2tp-client-configure-source-port/172303/7