Authorization of L2TP+IPsec client on Mikrotik via Active Directory is possible only by username+password?

Question

Mikrotik

There is a configured and successfully operating system of PPTP clients that log in to Mikrotik in the Active Directory domain via Radius.
Prompt, whether it is possible to make to configure authorization of L2TP+IPsec clients on MT in AD only on a name-password?

Answer 1

Only by name + password is impossible, for IPsec you need either a certificate or a pre-shared key
And using the Windows CMAK, you can "sew" the pre-shared key into the "installer" of the l2tp connection for Windows.

Answer 2

Possible.
1. We raise the server with the NPS role, set up authorization policies on it
2. Set up a connection between this server and Mikrotik (this is the radius)
3. Set up PPTP authorization using the radius.
Well, there is google