All tutorials
L2TP
L2TP Client Setup
L2TP (Layer 2 Tunneling Protocol) is the most commonly used protocol for MikroTik remote access. It provides a reliable encrypted tunnel.
Before You Start
- You need a MikRouter remote account with an active subscription.
- Open Winbox and connect to your MikroTik router via MAC or IP address.
- Have your remote account credentials ready:
PPP Username,PPP Password, andServer Address. - These credentials are available in your dashboard under the remote details page.
1
Open PPP Interface
In Winbox, navigate to PPP. This opens the PPP interface window.
2
Add L2TP Client
Click the
+ (Add) button and select L2TP Client from the dropdown list.3
Configure General Tab
In the General tab, set a descriptive name for the interface.
| Field | Value | Note |
|---|---|---|
| Name | l2tp-mikrouter | Any name you prefer |
4
Configure Dial Out Tab
Switch to the Dial Out tab. This is where you enter your MikRouter credentials.
| Field | Value | Note |
|---|---|---|
| Connect To | server-address.mikrouter.com | From your remote details |
| User | your-ppp-username | Your PPP username |
| Password | your-ppp-password | Your PPP password |
| Profile | default-encryption | Select this profile |
| Keepalive Timeout | 60 | Default value |
| Src. Address | none | Leave empty |
| Random Source Port | No | Leave unchecked |
| Use Peer DNS | No | Leave unchecked |
| Use IPsec | No | Leave unchecked |
| Allow Fast Path | No | Leave unchecked |
| Dial On Demand | No | Leave unchecked |
| Add Default Route | No | Leave unchecked |
5
Configure Advanced Tab
Switch to the Advanced tab.
| Field | Value | Note |
|---|---|---|
| Allow | mschap2, mschap1, chap, pap | Check all four |
| L2TP Protocol Version | L2TPv2 | Use version 2 |
6
Apply and Connect
Click
Apply then OK. The interface will attempt to connect. You should see the status change to connected with an R (Running) flag in the interface list.7
Verify Connection
Go to PPP›Interface and check your L2TP client. The Status should show
connected. You can also check the assigned IP address under IP›Addresses.