• accessing an Intranet/LAN of a company for remote (mobile) clients (employees)
Each L2TP connection is composed of a server and a client. The MikroTik RouterOS may function
as a server or client or, for various configurations, it may be the server for some connections and
client for other connections.
Quick Setup Guide
To make a L2TP tunnel between 2 MikroTik routers with IP addresses 10.5.8.104 (L2TP server)
and 10.1.0.172 (L2TP client), follow the next steps.
• Configuration on L2TP server router:
1. Add a L2TP user:
[admin@L2TP-Server] ppp secret> add name=james password=pass \
\... local-address=10.0.0.1 remote-address=10.0.0.2
2. Enable the L2TP server
[admin@L2TP-Server] interface l2tp-server server> set enabled=yes
• Configuration on L2TP client router:
1. Add a L2TP client:
[admin@L2TP-Client] interface l2tp-client> add user=james password=pass \
\... connect-to=10.5.8.104
Specifications
Packages required: ppp
License required: level1 (limited to 1 tunnel) , level3 (limited to 200 tunnels) , level5
Home menu level: /interface l2tp-server , /interface l2tp-client
Standards and Technologies: L2TP (RFC 2661)
Hardware usage: Not significant
Related Documents
• Package Management
• IP Addresses and ARP
• PPP AAA
• EoIP Tunnel Interface
• IP Security
Description
L2TP is a secure tunnel protocol for transporting IP traffic using PPP. L2TP encapsulates PPP in
virtual lines that run over IP, Frame Relay and other protocols (that are not currently supported by
MikroTik RouterOS). L2TP incorporates PPP and MPPE (Microsoft Point to Point Encryption) to
make encrypted links. The purpose of this protocol is to allow the Layer 2 and PPP endpoints to
Page 324 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.