Windows 7 L2TP Ipsec error 789

RouterOS Beginner Basics
1

Is there any known issue with MT and Windows 7 ??? I have been trying 3rd PC with the same issue.

/interface l2tp-server server
set enabled=yes ipsec-secret=“passwd” use-ipsec=yes

/ppp secret
add local-address=192.168.200.1 name=Test1 password=“passwd” remote-address=192.168.200.51

/ip firewall filter
add action=accept chain=forward dst-port=3389 in-interface=!bridge1-lan protocol=tcp
add chain=input comment=“Accept established and related packets” connection-state=established,related
add chain=input comment=“Accept all connections from local network” in-interface=bridge1-lan
add action=drop chain=input comment=“Drop invalid packets” connection-state=invalid
add action=drop chain=input comment=“Drop all packets which are not destined to routes IP address” dst-address-type=!local
add action=drop chain=input comment=“Drop all packets which does not have unicast source IP address” src-address-type=!unicast
add action=drop chain=input comment=“Drop all packets from public internet which should not exist in public network” in-interface=ether1-WAN-Fiber src-address-list=NotPublic
add action=drop chain=input comment=“Drop all packets from public internet which should not exist in public network” in-interface=ether2-WAN-Cable src-address-list=NotPublic
add chain=input comment=“L2TP IPSec VPN” in-interface=ether1-WAN-Fiber port=1701,500,4500 protocol=udp
add chain=input comment=“L2TP IPSec VPN” in-interface=ether2-WAN-Cable port=1701,500,4500 protocol=udp
add chain=input comment=“L2TP IPSec VPN” in-interface=ether1-WAN-Fiber protocol=ipsec-esp
add chain=input comment=“L2TP IPSec VPN” in-interface=ether2-WAN-Cable protocol=ipsec-esp

on the logs it says parsing packet failes wrong password

There is no way I used wrong password. Using MAC os similar thing. Any thoughts?

2

According to this page of Microsoft the error 789 is an generic error, which could be caused by the IPSec connection not being established, you could check this by watching the IP > IPSec menu-items in Winbox, you would see a remote peer when IPSec is establishing a connection.

How is your traffic flow, from the bits of config you shared I noticed you have 2 WAN interfaces, on which one are you connection, and have you setup proper routing-rules (aka Mangle) to send the replies from the proper interface (including the proper masquerade)?

I have numerous L2TP VPN connections from MikroTik to anywhere, and haven’t run into any issue yet.

3

I have just deleted VPN config from PC and set up from scratch, works ok now.