2 L2TP/IPSec clients behind one NAT?

Question

VPN

Given L2TP/IPSec server on MikroTik (white ip), 2 clients on the same network (gray ip). I connect the first client - everything is ok, I connect the second one - the first one is thrown out, the second one is ok. The problem is related to the same external ip for clients, because. are behind one NAT if clients cling from different networks (for example one on 3G, another on utp) - everything works. Where to look, what to turn?

Answer 1

multiple vpn servers with different networks and routing already between them?

Answer 2

Look in the Peers settings there is such a Generate Policy parameter. Most likely you have it in port override, change it to port strict.
Some clients refuse to connect in this mode, try it.

Answer 3

Checking the nat-traversal checkbox in the ipsec peer settings should help, it is also necessary to open port 4500 (UDP) in addition to ports 1701,500