L2TP over IPSEC

RouterOS Beginner Basics
1

Hi all.
I’m trying setting up L2TP over IPSEC with pre-shared key.
Server side – Zyxel ZyWall USG 50, mikrotik - as client.
After configuring l2tp and ipsec section i have error in log : "Error-Message=“No IPSec protection for the L2TP tunnel”
I attached log file to this message.
How can I fix it?
My settings:

/ip ipsec proposal
set [ find default=yes ] auth-algorithms=md5,sha1 enc-algorithms=des,3des lifetime=1d pfs-group=none
/ip ipsec peer
add enc-algorithm=des generate-policy=yes nat-traversal=yes secret=5s4f4df6d4f46JHD44ds545654sA
/ip ipsec policy
add dst-address=92.241.___.___/32 level=use sa-dst-address=92.241.___.___ sa-src-address=192.168.101.211 src-address=192.168.101.211/32




/interface l2tp-client
add connect-to=92.241.___.___ disabled=no name=l2tp-out1 password=45Ddl7Nbc user=vp

(With Win7 client I can connect correctly. I Use standart Windows settings for L2TP with ipsec and preshared key.)
log.1.txt (7.08 KB)

2

Any ideas?

3

Can anyone put here config for L2TP client on mikrotik, over IPsec with pre-shared key?

4

Watch the presentation in my sig, it explains all you need to know about L2TP/IPSec on Mikrotik.

There is a client config in there as well.