*NEED HELP* L2TP client connection + Secret question

RouterOS General
1

I have joined a VPN company which only support L2TP connection. There is no problem to configure the L2TP connection on Windows or Iphone, however, when it comes to the RouterOS, I run into a problem.

I configure the L2TP connection like the picture below, but there is no option for me to specify the “secret” field. The VPN provide me 4 fields to login to their VPN server

VPN server IP
Username
Password
Secret

I have search the web but I can’t even find one example how to configure L2TP client connection with a “secret” field. Anyone can give a hand please?

On a iphone VPN setting, it has a field called “Secret” which I can’t find the same thing in RouterOS L2TP client conneciton

2

You’re already made profile pppClient. And Under PPP - Secrets You can create new “user”, assign it to that profile.

3

I think the “user” under the secret tab is for creating username that VPN into the Mikrotik router which use as L2TP server. I am trying to use Mikrotik router to VPN out to a vpn company use as a L2TP client.

4

Did you try adding it under IP / IPsec / Peer?
I know that’s where it’s used as an L2TP server.

5

For other router, L2TP client should come with a text field called “Secret”…just like the iphone. However, RouterOS just doesn’t have it.

6

Like jaytcsd mentioned, it is the pre shared key, on your ipsec configuration

7

If it is a ipsec configuration, I wonder if you have any example to do that for L2TP? Because most ipsec configuration would need the local IP address of the destination which obviously the VPN company won’t provide.

8

I would try to follow something like this

http://wiki.hidemyass.com/Mikrotik

and perhaps a bit more recent (with ipsec and secret)

https://support.hidemyass.com/hc/en-us/articles/202721196-Mikrotik-PPTP-L2TP-Setup-OS-6-0-or-newer-#l2tp

9

Upgrade to RouterOS 6.18 and check the new Use IPsec option in the L2TP server config window. Then put your secret in there.

If you don’t upgrade to RouterOS 6.18, or later, you get to manually configure IPsec for yourself..

10

http://wiki.mikrotik.com/wiki/L2TP_%2B_IPSEC_between_2_Mikrotik_routers

the shared secret is the word “test” in this example


/ip ipsec peer add address=10.0.16.9/32 auth-method=pre-shared-key dh-group=modp1024
disabled=no dpd-interval=disable-dpd dpd-maximum-failures=1 enc-algorithm=3des
exchange-mode=main generate-policy=no hash-algorithm=sha1 lifebytes=0 lifetime=1d
my-id-user-fqdn=“” nat-traversal=no proposal-check=obey secret=test send-initial-contact=yes