Hi All, So, had a redundant router setup running the latest ROS version 6 and integrated with Rulon 2FA for users logging in via L2TP/IPsec server. So far so good, works perfectly. One of the routers (a CCR1036) died and have decided to upgrade to the newest CCR2118. However, this comes with in my…

[image] siscom: World has decided that L2TP is not the most secure, ROSv7 removes it. did you look at this ? /system/device-mode/print mode: advanced allowed-versions: 7.13+,6.49.8+ flagged: no flagging-enabled: no …

[image] siscom: … the World has decided that L2TP is not the most secure, ROSv7 removes it. The world, and Mikrotik, are correct.

No, thank you. I’ll take a look.

Yes, agreed. But the option should still be available. There are many more obvious security issues but few have been chopped off like L2TP/IPsec, also from Android.

OVPN does work perfectly fine with 2FA

As hinted, it wasn't taken away, and it works perfectly. It just comes disabled by default and you have to enable it.

Use "service=ipsec" instead of "service=login": [image] How to add 2FA to MikroTik logins Security Important: The RouterBOARD (and the device where the code is generated) must be perfectly synchronized with NTP. Otherwise, it is impossible to log in. No Route…

VPN with 2FA

RouterOS Security

rextended April 9, 2026, 11:42pm 8

Use "service=ipsec" instead of "service=login":