So... Wake on LAN not working over the VPN... L2TP/IPsec
Works good over wifi on LAN.. what am I missing?
I am using VLANS...

WOL is L2 functionality (you are sending packet to particular MAC address, therefore it will work only if your source and target devices are on the same L2 segment (to dumb it down - within the same LAN and same VLAN, not behind a router, not different VLAN).
VPN may or may not be bridged (having same IP range is not enough). L2TP obviously has the ability to be bridged, but it is often not set up that way. Especially if you use VLANs then your VPN would have to be bridged to the correct VLAN.

Make sure that you are on the same L2 segment. you can test it for example this way: if you ping the target device when it is running, you get response and according to your ARP records, your source device should see target IP with the correct MAC.

Okay.. VPN profile is bridged to the primary bridge where all VLANS reside.
I can ping the target device on VLAN and get replies back to the source device connected to L2TP/IPsec VPN.

But still no WOL via VPN L2.. what else to look for?

I think both ends need to support BCP the bridge L2 over a PPP link. The a look at the wiki page.

One option would be to use the WoL tool from RouterOS it self.

Second options would be to setup a ARP entry with a the MAC address set to FF:FF:FF:FF:FF:FF on the vlan interface. Set the IP address to a free address outside the DHCP range. The client needs a WoL tool ware you can set the broadcast IP address. For example wol.exe and run it like this: wol.exe f1:dc:84:e6:2a:c9 /d 192.168.80.253

Of course you get reply on the ping. Question is whether you get reply from the device or from the router.

check your ARP records, your source device should see target IP with the correct MAC.

Thats why I asked this - the ARP record in your computer will prove, whether it is the device (therefore you have direct L2 connection) or whether it is router which just forwarded the ping (and you don't have L2 connection to the device).

When you run the ping through VPN, what MAC address does your computer show for the requested IP? In windows, you can find it for example with command: .

Yes.. no arp entry on source for the target IP when connected to the L2TP VPN..
The l2tp profile is bridged..