RouterOS v6.44 or above: https://saputra.org/threads/mikrotik-l2tp-over-ipsec-vpn-server-tutorial-guide-for-routeros-v6-44.106/
Stats: http://rickfreyconsulting.com/mikrotik-vpns/
New info? http://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Road_Warrior_setup_with_Mode_Conf
Needs verification and completion
http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP#Server_configuration
http://wiki.mikrotik.com/wiki/Manual:Interface/L2TP
https://www.youtube.com/watch?v=tpgEqzwj_OQ
PPP → Interface → L2TP Server → Enable
default-encryption
or create your own profilechap
and pap
MSCHAPv2
and MSCHAP1
Use IPsec
OK
IP → Pool → Add
PPP → Profiles → Default-Encryption
PPP → Interface → L2TP Server
default-encryption
PPP → Secrets → Add+
l2tp
default-encryption
Enable Proxy-ARP on the LAN interface for proper (layer 2 address) ARP resolution.
If you use a LAN bridge, modify that.
Interfaces → etherN → General → ARP → Proxy-ARP