Click , then drag this rule up so it sits above any generic drop rules in your input chain. Next, allow the ESP protocol: Click + to add another rule: Chain: input Protocol: 50 (ipsec-esp) In. Interface: Select your WAN interface. Switch to the Action tab: Action: accept Click OK and move it above the drop rules. Via Command Line (CLI):
This pool assigns virtual IP addresses to connecting clients. mikrotik l2tp server setup full
This write-up shows a full, practical L2TP over IPsec server setup on MikroTik RouterOS (assumes RouterOS v6.45+ or v7.x). It covers network design, step-by-step configuration (both RouterOS CLI and WebFig/Winbox equivalents noted), common client settings, security considerations, and troubleshooting tips. Assumptions made: router has a public IPv4 on interface ether1 (WAN), local LAN is 192.168.88.0/24 on bridge1/ether2+, and you want remote clients to receive addresses from 192.168.89.0/24 (L2TP pool). Adjust names/subnets to your environment. Click , then drag this rule up so