/ip ipsec policy group
add name=L2TP/IPSEC
/ip ipsec proposal
add enc-algorithms=aes-256-cbc,aes-192-cbc,aes-128-cbc,3des name=L2TP/IPSEC pfs-group=modp4096
/ip pool
add name=IPSEC/L2TP ranges=192.168.168.200-192.168.168.210
/ppp profile
set *0 only-one=no
add dns-server=8.8.8.8,8.8.4.4 local-address=192.168.88.1 name="pptp profile" only-one=no remote-address=ppp use-compression=yes use-encryption=required
add comment=L2TP/IPSEC local-address=192.168.88.1 name=L2TP/IPSEC remote-address=IPSEC/L2TP use-encryption=yes use-upnp=no
set *FFFFFFFE only-one=no
/interface l2tp-server server
set authentication=mschap2 default-profile=L2TP/IPSEC enabled=yes ipsec-secret=xxx max-mru=1460 max-mtu=1460 use-ipsec=yes
/ip dhcp-server network
add address=192.168.88.0/24 comment="LAN - DHCP" dns-server=8.8.8.8,8.8.4.4 gateway=192.168.88.1
add address=192.168.168.0/24 comment="VPN L2TP/IPSEC" dns-server=8.8.8.8,4.4.4.4 gateway=192.168.168.1
/ip firewall filter
add action=accept chain=input comment=IKE&NAT-T connection-state=new dst-port=500,1701,4500 protocol=udp
add action=accept chain=output comment=IKE&NAT-T dst-port=500,1701,4500 protocol=udp
add action=accept chain=input comment=IPSEC-AH protocol=ipsec-ah
add action=accept chain=input comment=IPSEC-ESP protocol=ipsec-esp
add action=accept chain=input comment=IPSEC dst-port=1701 protocol=udp
add action=accept chain=input comment=IPSEC dst-port=500 protocol=udp
add action=accept chain=input comment=IPSEC dst-port=4500 protocol=udp
/ip ipsec peer
add address=0.0.0.0/0 comment=L2TP/IPSEC dh-group=modp1024 enc-algorithm=aes-256,aes-128,3des exchange-mode=main-l2tp generate-policy=port-override passive=yes policy-template-group=L2TP/IPSEC secret=\
heslo send-initial-contact=no
/ppp secret
add comment=USER name=USER password=heslo profile=L2TP/IPSEC service=l2tp
tohle je aktuální který jsem našel tady na fóru, postupu bylo více pokaždé jsem začal od 0 ať z toho předešlého nic nezbyde.....
