L2TP over IPSec

RouterOS General
1

Hi all,

I have a problem with L2TP. I can not connect more than 1 user from the same public IP.

eg : 2 home workers have the public IP 1.1.1.1 They want to connect to their office over L2TP. Only 1 user i able to connect. Is there any restriction regardind this?

Thank you in advance,

Bests Regards,

2

This is a known limitation of MikroTik IPSec NAT-T.

3

Thank you for your response. Do you know if this limitation will stay or not?

What can i do so?

4

Mikrotik officially said here on the forums that they are working on a better NAT-T implementation, no ETA tho.

We deploy a router and build a site-to-site tunnel when we have multiple clients that need to connect from a single site.

5

Ok for this but what about itinerants workers? I do not want to implement PPTP.

6

We do SSTP in those cases. Its easy to setup, you can get a free cert from www.startssl.com
Its also secured with AES-128, and is fully NAT compatible.

Downside: only linux and windows have client support, and you have to have your own domain (to link hostname to cert)

7

Thank you for your help, i will take a look of this.

Have a nice day :slight_smile: