I setup l2tp with IPSEC, client will get the ip 192.168.3.20
i setup Vlan 3 on the router and assign to bridge interface

i have a vm with vlan id 3 and ip 192.168.3.2 . after connect to IPSEC, not sure cannot rdp from 192.168.3.20 to 192.168.3.2 but i can remote other without VLAN tag ip.
before i setup vlan , i can remote , anyone can help?

related MTU or i need to setup tag the vlan from packeg L2tp IPSEC? if yes, how can i set?

The name of L2TP is confusing. To establish an L2 tunnel using L2TP, you need BCP to be supported at both the client and the server, just like with any other PPP-based tunneling protocol. Your description suggests that only the L2TP server is a Mikrotik and the L2TP client is a PC or a phone, is that the case?

The name of L2TP is confusing. To establish an L2 tunnel using L2TP, you need BCP to be supported at both the client and the server, just like with any other PPP-based tunneling protocol. Your description suggests that only the L2TP server is a Mikrotik and the L2TP client is a PC or a phone, is that the case?

Thanks, you are correct, I found out the issue, seem the IP address with the L2tp client was same subnet for target remote server. I packet capture found out cannot find arp.
i use another subnet IP for L2tp client then fix the issue.

Thanks