Hello!

I run a L2TP Server on my Mikrotik at home (VDSL connection). The Client side is a Mikrotik connected to some kind of WLAN router running NAT. The configuration export without secrets u find here:

Server: Client: The L2TP connection seems to work (R for running, uptime is counting). I can ping from one MT the otherone and vice versa by the defined addresses.

Based on that I setup the peers for the IPsec.In the "remote peer" section are two connection which are indicated as established and the uptime is counting. After that I defined a policy to connect both local networks through a tunnel. PH2 state is established and the installed SAs show connections between the peer IPs. So far, so good

BUT, I can't ping the router or a client from one subnet to other. Even if I switch of the final drop rules in both firewalls, no ping goes through the tunnel. Any idea what is wrong? Must be a general problem in the config....

Thx, Holger

No ideas?

I have the same question except in my case the IPSec L2TP server is a dedi/VPS with a public IPv4/IPv6, while my client side (home office) is a CG-NAT router.

Like you, I have difficulties.

Output/outgoing works, I can assign the IPSec output to any IP and it's traffic goes through the VPN, but I cannot get anything inbound to my PCs with my Mikrotik router acting as the client.

My VPS can SSH the Mikrotik router, but that's useless to me.

Have you tried running your IPSec client software on your laptop/PCs on different WANs? If I do that I can RDP/SSH the other devices as intranet works.

OpenVPN client-to-client mode also works despite the carrier-NAT, but only if I use my PCs as clients, which isn't ideal (many of my PCs/laptops are lower power).

If I find out anything more I'll share, but hopefully some of my rambling helps.