VPN Access not work in Quick Set

My Device is hAP ac with factory config.
ROS version: 6.33.5 (stable)

I have enabled VPN access in menu “Quick Set” and then ROS will auto config below VPN. Howerver only PPTP is working.
How to solved it ?

  1. PPTP - OK ( iOS 9.3 and WIN7 )
  2. L2TP/IPsec - FAIL ( iOS 9.3 and WIN7 )
  3. SSTP - FAIL ( WIN7 )

L2TP/Ipsec by default works with PSK (not xauth) and no modeconf, it is very easy to misconfigure iphone client settings by selecting ipsec + modeconf or instead of PSK authentication configure to use xauth.

Reset to factory config and follow up this tutorial to config again.
http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP#L2TP.2FIpSec_setup

Finally, iOS 9.3 and Win7 cannot remote access. Please advise !

/interface l2tp-server server
set enabled=yes use-ipsec=yes ipsec-secret=mySecret default-profile=default

/ip pool add name=vpn-pool range=192.168.88.2-192.168.88.100

/ppp profile
set default local-address=192.168.88.1 remote-address=vpn-pool

/ppp secret
add name=user1 password=123

/ip firewall filter
add chain=input protocol=udp port=1701,500,4500
add chain=input protocol=ipsec-esp

It is not possible to guess what is going on on your router. You need to start to debug your setup:

  1. Check connectivity between router and your device.
  2. Check if ipsec packets are actually not blocked by firewall
  3. Enable ipsec logs and look for any error messages.
  4. If ipsec is fine then enable l2tp logs and see where the problem is.