/ip ipsec proposal set [ find default=yes ] auth-algorithms=sha256 enc-algorithms=aes-256-cbc lifetime=1h pfs-group=none
Every user who needs to connect to the VPN must have an account configured. mikrotik l2tp server setup full
/ppp profile add name=l2tp-profile local-address=192.168.89.1 dns-server=192.168.88.1 remote-address=l2tp-pool bridge=bridge1 /ip ipsec proposal set [ find default=yes ]