MikroTik - L2TP Configuration

[@MasteAlex95]

Perfect tutorials. Missed good stuff about networks on KZbin:)

[@TheNetworkBerg]

Thank you very much for the comment, let me know if there's anything specific network related you are interested in and I'll see if I can make a video on the subject!

[@MasteAlex95]

@@TheNetworkBerg well, specific for me will be very interesting to see MPLS principles and configuration. But assume that it might be too narrow topic for video )

[@TheNetworkBerg]

Not at all, MPLS is something I would like to put into a video format and it is relatively easy to configure on MikroTik routers. Although the concept is a bit on the advanced end and may confuse some people who are new to it. I am currently working on a few other videos. I will however add this to my to-do list.

[@gershfritz5218]

@@TheNetworkBerg Hi Network Berg, are you from South Africa? Your accent sounds South African :) If so, do you provide in class training. Your explanations are wonderful and I can see where you can add value to my team and I.

[@JESUSistheGoodNews]

How if other side has Dynamic IP?

[@mustaphab32]

great , jsut a small hint , if you lower the intro music , it is way higher than the video , thanks

[@TheNetworkBerg]

Thanks for the feedback! I have had similar comments and will lower the intro music for future videos thanks :)!

[@siddharthkothari8925]

I have created l2tp link ..but not able to ping host connected on eth5 of server , though i can ping eth5 port from client end ...pls suggest solution

[@valerio53061]

Hi, great video, i cant find you video where you talk about l2tp vrf, can you link it? Thanks

[@oldschool1079]

1.basically, when connecting more than 1 remote site-mikrotik router via l2tp tunnel, you MUST assign 2 profiles with different WAN IP addresses on Mikrotik that acts as a l2tp server (in this case 10.1.0.1 and 10.1.0.3 ) for them to be able to connect properly? Could you just assign 10.1.0.1 as local address for both sites or that would not work? Also do you need to assign those static routes in mikrotik l2tp server or would the mikrotik server learn the route automagically when they connect for the first time? 2. When creating l2tp client connection from mikrotik clients can you enter dynamic dns name associated with your ISP given IP that changes every 24 hours in Dial Out Connect To setting? 3. Also when you set the DNS options on server or client side when configuring stuff, can you set split dns somehow, so the remote clients use mikrotik l2tp server as dns server when in comes to local vpn lan queries and use google public dns when they are browsing the web on that remote location? Hopefully i made sense with my questions :) Great work Berg, keep them coming.

[@daffadarmawan8255]

damn this is a good tutorial, btw, can l2tp client get an internet connection ? if so what kind of configuration should i use? should i configure some firewall on the l2tp server or something?

[@green-media-pl]

Is it secure to use l2tp without IPsec?

[@vrejab3795]

Hi, 1. Is it possible to configure Microtic as Openvpn-client to a Openvpn-server installed on Ubuntu machine? 2. If yes, then how is it possible to make Mikrotik read its Openvp-client configurations from .ovpn file? 3. Would you please create a video for that purpose, the goal is to use Mikrotik as the encrypted GW for all clients that are connected to it and rout to internet through the Openvpn-server 🙃

[@nicoladellino8124]

👏👏👏

[@janherbst5059]

Very nice tutorial. I use similar setup but with a cloud hosted CHR in data center.. Do you have a blog or website with these steps that you using perhaps?

[@ahmed2002235]

Hi Berg, I have an l2tp server so i have two sites One site is public and the another is local So i wanna access the local of public site Btw from mikrotik i can access the public site i have ping on them but i can’t reach it via pc also I’ve created nats and routes but didn’t work

[@BulatM]

Great video. Is it possible to have simultaneously router to router and road warrior vpn connections? Could you please make a video how to setup ikev2 vpn sever, and how to connect mobile devices to it. Many thanks!!!

[@bucharestcartraffic]

can you also make one with investigating why packets might not be routed correctly and how to solve ?

[@TheNetworkBerg]

Hi, Please elaborate on what you mean packets might not be routing correctly? Perhaps give me a scenario where you have issues. For the most part routing traffic over a L2TP tunnel is pretty straight forward and rarely experiences routing issues.

[@Dr.Mythnick]

@@TheNetworkBerg ... you have 3 sites a,b,c. A is the main site & B,C are l2tp to A. How can you route packets through a, from b to c ! How can you check were the packets stop. For example i have a situation were i can't ping the lan of C from B but i can ping the l2tp side ip of C from B.

[@aspected]

Static routes between them?

[@bucharestcartraffic]

@@aspected i do now static routes...but i would want bgp...and how could I investigate if i mess one static route or the bgp?

[@DhaneshViswanath]

What is the Model of this router?

[@TheNetworkBerg]

This is a CHR which is a virtual router :)

[@DhaneshViswanath]

@@TheNetworkBerg could you please suggest me a Model which has L2tp/IPSec VPN client option? Please

[@デク-b7j]

@@DhaneshViswanath look up on their site, maybe?

[@aspected]

@@DhaneshViswanath Pretty sure even the hAP series routers have this

[@jimmertzos3967]

from all your guides this was the worst one.... you dont explain anything import this is only a lab scenario!

[@TheNetworkBerg]

Sorry you feel that way jim, I do have an updated L2TP guide that I made specifically for the FREE MTCNA course I uploaded to KZbin earlier this year. You can check out that video here: kzbin.info/www/bejne/nJKkpGOIr76Fars Or the playlist here: kzbin.info/aero/PLJ7SGFemsLl3XQhO8g0hHCrKnC6J3KURk

[@jimmertzos3967]

@@TheNetworkBerg you guide to wireguard solves the problem entirely :D

[@славаегоров-р2ф]

Wtf man..why you didn't explain where you cfg external ip on wan intf..20min video..but not add this..why..tunnel without it not up..

[@TheNetworkBerg]

Apologies if you were having issues with setting this up yourself, there are other videos on the channel that teaches you how to setup on IP on an interface as well. If you want please let me know what you were struggling with exactly so that I can keep that in mind for future videos. Thanks for your feedback!

[@aspected]

Dude...what? That's not even relevant to the video. There's many other videos by this guy on interface setup. WAN IP is almost a first step in setup - you shouldn't be configuring L2TP without having done at least the basic setup first...

[@славаегоров-р2ф]

@@aspected Fast answer, you don't get l2tp vpn without pre configured ip interface, that all