# Write '''Pre-shared key''' (write the password which you created with this command /ip ipsec identity add generate-policy=port-override auth-method=pre-shared-key secret="password" peer=l2tpserver ).
+
# Press '''Save'''.
+
# Write '''IPsec''' interface name (write anything you want) and press '''Add''.
+
# When the interface appears like in the example, press '''Edit'''.
+
+
[[File:]]
+
+
# '''Enable''' instance.
+
# Select '''Type''' (Transport).
+
# Write '''Remote VPN endpoint''' (MikroTik public IP address).
+
# Select '''DH group''' (MODP1024)
+
# Set all of the settings in '''Phase 2''' to be exactly the same as in the '''Phase 1'''.
+
# Press '''Save'''.
+
+
==Testing configuration==
+
+
Go to '''Status > Routes''' and in the '''Active IP Routes''' table you should see this new route:
+
+
[[File:]]
+
+
Also, you can check whether '''IPsec''' is working by writing this command to CLI: