This tutorial will guide you through setting up L2TP or PPTP VPN
connection on Mikrotik Routers but first let’s check our
requirements and recommendations.
Requirements
To ensure a proper work of FastVPN with a Mikrotik router, you will need:
VPN Setup instructions
1.
Before you start configuring VPN, you need to establish a connection
with your Mikrotik router. To do this, you need to enter in your browser
the following address: http://192.168.1.1 (if this doesn’t work,
please refer to your router’s manual to find out what is the Default
Gateway Address). Also you have to set your network connection to obtain
an IP address automatically if you connect to your router via Ethernet.
2. Click on "PPP" (1) from the left-side menu and click on "+" (2):
3. Choose "L2TP Client" or "PPTP Client" (3):
4. Enter the name of your connection in the "Name" field (5) of the General tab (4). For example, you can use "l2tp":
5. Select the Dial Out tab (6).
Enter the address of the VPN server you want to connect to in the "Connect to" field (7).
You can find all the available servers in the FastVPN
Account Panel.
Enter your VPN username and password in the "User" and "Password" fields (8). You can check them in your FastVPN
Account Panel..
NOTE: Make sure you use your FastVPN username and password and NOT the Namecheap account credentials.
If you selected "L2TP Client" at the Step 3, put the checkmark next to "Use IPsec" and enter vpn in the IPsec Secret field.
Click the Enable button (9):
6. Choose the Status tab (10).
Check "Last Link Up Time" (11) and "Uptime" (12) to ensure your VPN connection is UP.
Press "OK" (13) to close the window:
7. You should see the created "L2TP" connection (14) in the PPP window. "R" (15) means the VPN connection is ready:
8. Select IP (16) and then choose "Firewall" from the left-side menu, click on the NAT tab (17) and click on the "+" icon (18):
9. In the General tab (19), choose "srcnat" for "Chain" (20) and "L2TP" for "Out. Interface" (21):
10. Click on the Action tab, choose "masquerade" for "Action" (22).
Click on "Apply" (23) to save the changes and click on "OK" (24) to close this window:
11. In the Firewall window, click on the Mangle tab (25) and click on the "+" icon (26).
In the "General" Tab, open the "Mangle Rule" window (27) and select "prerouting" for "Chain" (28).
Enter
the range of IP addresses in your LAN which you want to connect to VPN
through this router in the "Src. Address" field (29):
12.
Click on the Action tab (30), choose "mark routing" for "action" (31),
enter "l2tp" in the New Routing Mark field (32) and put the checkmark
next to "Passthrough" (33).
Click on "Apply" (34) to save the changes and click on "OK" (35) to close this window:
13. Click on "IP" (36) and choose "Routes" from the left-side menu.
Click on the "+" icon (37):
14. In the General tab (38), enter "0.0.0.0/0" in the "Dest. Address" field (39).
Choose "L2TP" from the Gateway menu (40).
Select "unicast" from the Type menu (41).
In the Routing Mark menu (42), choose the routing mark "L2TP" created at the Step 10 in "IP > Firewall > Mangle".
Click on "Apply" (43) to save the changes and click on "OK" (44) to close this window:
15. Select "IP" (45) and "DNS" from the left-side menu.
Enter
the Google DNS addresses (or other open DNS you want to use) in the
Servers field (46) and put the checkmark next to "Allow Remote Requests"
(47).
Click on "Apply" (48) to save the changes and choose "OK" (49) to close this window:
16.
To see if VPN is accessible for your local network, click on "New
Terminal" (50) from the left-side menu and enter "ping 8.8.8.8 (or
whatever is up) interface={PPP connection interface} src-address={local
gateway}".
For example, in our case, it will look like:
ping 8.8.8.8 interface= l2tp src-address=192.168.88.1

If you need any further assistance, please contact our
Support Team.