This tutorial will guide you through setting up L2TP or PPTP VPN connection on Mikrotik Routers but first let’s check our requirements and recommendations.

Requirements

1. Before you start configuring VPN, you need to establish a connection with your Mikrotik router. To do this, you need to enter in your browser the following address: http://192.168.1.1 (if this doesn’t work, please refer to your router’s manual to find out what is the Default Gateway Address). Also you have to set your network connection to obtain an IP address automatically if you connect to your router via Ethernet.

2. Click on "PPP" (1) from the left-side menu and click on "+" (2):

3. Choose "L2TP Client" or "PPTP Client" (3):

4. Enter the name of your connection in the "Name" field (5) of the General tab (4). For example, you can use "l2tp":

5. Select the Dial Out tab (6).

Enter the address of the VPN server you want to connect to in the "Connect to" field (7).

You can find all the available servers in the FastVPN Account Panel.

Enter your VPN username and password in the "User" and "Password" fields (8). You can check them in your FastVPN Account Panel..

NOTE: Make sure you use your FastVPN username and password and NOT the Namecheap account credentials.

If you selected "L2TP Client" at the Step 3, put the checkmark next to "Use IPsec" and enter vpn in the IPsec Secret field.

Click the Enable button (9):

6. Choose the Status tab (10).
 

Check "Last Link Up Time" (11) and "Uptime" (12) to ensure your VPN connection is UP.

Press "OK" (13) to close the window:

7. You should see the created "L2TP" connection (14) in the PPP window. "R" (15) means the VPN connection is ready:

8. Select IP (16) and then choose "Firewall" from the left-side menu, click on the NAT tab (17) and click on the "+" icon (18):

9. In the General tab (19), choose "srcnat" for "Chain" (20) and "L2TP" for "Out. Interface" (21):

10. Click on the Action tab, choose "masquerade" for "Action" (22).

Click on "Apply" (23) to save the changes and click on "OK" (24) to close this window:

11. In the Firewall window, click on the Mangle tab (25) and click on the "+" icon (26).

In the "General" Tab, open the "Mangle Rule" window (27) and select "prerouting" for "Chain" (28).

Enter the range of IP addresses in your LAN which you want to connect to VPN through this router in the "Src. Address" field (29):

12. Click on the Action tab (30), choose "mark routing" for "action" (31), enter "l2tp" in the New Routing Mark field (32) and put the checkmark next to "Passthrough" (33).

Click on "Apply" (34) to save the changes and click on "OK" (35) to close this window:

13. Click on "IP" (36) and choose "Routes" from the left-side menu.

Click on the "+" icon (37):

14. In the General tab (38), enter "0.0.0.0/0" in the "Dest. Address" field (39).

Choose "L2TP" from the Gateway menu (40).

Select  "unicast" from the Type menu (41).

In the Routing Mark menu (42), choose the routing mark "L2TP" created at the Step 10 in "IP > Firewall > Mangle".

Click on "Apply" (43) to save the changes and click on "OK" (44) to close this window:

15. Select "IP" (45) and "DNS" from the left-side menu.

 

Enter the Google DNS addresses (or other open DNS you want to use) in the Servers field (46) and put the checkmark next to "Allow Remote Requests" (47).

Click on "Apply" (48) to save the changes and choose "OK" (49) to close this window:

16. To see if VPN is accessible for your local network, click on "New Terminal" (50) from the left-side menu and enter "ping 8.8.8.8 (or whatever is up) interface={PPP connection interface} src-address={local gateway}".

For example, in our case, it will look like:

 

ping 8.8.8.8 interface= l2tp src-address=192.168.88.1