Sorry. My mistake. No problems with IPsec over L2TP. It was ISP problem in my case

Same here, after upgrade from version 6.42.7

Hello! I have fully working: L2TP/IPSec PSK with NAT-T (client behind the NAT) L2TP/IPSec RSA without NAT-T (public IP used) However, when I've tried to use L2TP/IPSec RSA with Client behind the NAT - got error on client side: (789 on Win10), got error on MikroTik side: ISAKMP-SA established the pac...

Same here, looks like L2TP/IPSec RSA not working with NAT-T

SOLVED: This can occur when the LmCompatibilityLevel settings on the authenticating DC has been modified from the defaults. HKLM\SYSTEM\CurrentControlSet\Control\Lsa\LmCompatibilityLevel For example, if you set this value to 5 (Send NTLMv2 response only. Refuse LM & NTLM ), then the DC will not ...

Hello! I have a problem with L2TP radius authentication. I'm trying to use Windows Server 2012R2 - NPS(radius) for authentication on MikroTik for Roadwarrior's L2TP\IPSec(RSA) VPN When VPN client using CHAP authentication - it connects successfully. When VPN client using MS-CHAP or MS-CHAP-v2 - then...

If some one else have problem like that:
To fix this problem, we need to change MMS of tcp syn, like:

/ip firewall nat add action=netmap chain=dstnat comment=DVR-tcp dst-port=[tcp_port_dvr] in-interface=ether1 protocol=tcp to-addresses=[local_IP_of_your_DVR] to-ports=[tcp_port_dvr] add action=netmap chain=dstnat comment=DVR-udp dst-port=[udp_port_dvr] in-interface=ether1 protocol=udp to-addresses=[...

Try to use dst-address= instead of in-interface= /ip firewall nat add action=dst-nat chain=dstnat comment=RDP dst-address=[YOUR-PREFERRED-PUBLIC-IP] dst-port=3389 protocol=tcp to-addresses=[Internal-IP] to-ports=3389 /ip firewall nat add action=dst-nat chain=dstnat comment=RDP dst-address=[YOUR-PREF...

I guess that
"/ip firewall export"
would help more to understand.

with the first configuration as below can I connect to the DVR remotely

Is it possible? I don't see any dst-nat rules.
From what side do you want to connect to DVR/Phone? WAN or LAN?

If understand correctly (If I'm wrong give some more information): 1. You cannot use xxxxxxxxxxxx.sn.mynetname.net address to login at MikroTik router behind NAT, xxxxxxxxxxxx.sn.mynetname.net assign DNS for external IP only. But you can use portmap (port forwarding) on "ADSL box" like: [e...

Hello! I have a problem with working L2TP/IPSec connection between MikroTik routers. Portmap(Port forwarding) do not work properly when I connect from ROUTER-1 to TCP port of ROUTER-2. Example: XNMP(Jabber) client from 192.168.6.2 behind NAT of ROUTER-1 is connecting to external(WAN)IP 1.1.1.1 of RO...