Sirs, good morning!
I wonder if it is possible to leave mikrotik with two VPN configurations, one pptp and another l2tp, both active and functional.
- Do you mean as a server?
The answer is yes. Additionally, the users can remain the same. I migrated PPTP → L2TP/IPsec very easily:
- ensure /ppp secrets have “service=any”
- configure /interface l2tp-server server … ipsec…
- start testing, each user can use both VPNs from the beginning, and you don’t need to choose
- once everybody can connect through the new one, you can disable the old one
I love how /ppp secrets can be used by all the PPP based VPNs. I don’t like that /ip ipsec identity is separated, and
also that /interface wireless security-profile is so clumsy if you want to have a big number of wireless “identities” stored
for connecting to different APs. Also /interface *-client could use a user and keep other parameters in a identity menu…
I hope they are evolving it in the good direction, towards a more unified identity handling…
If you mean client connections, you can have as many as memory allows:
/interface pptp-client add name=vpn1 …
/interface l2tp-client add name=vpn2 …
I love dial-on-demand, it is a pity that the old ovpn-client and apparently “native” ipsec do not support it.