/ip ipsec profile
set [ find default=yes ] enc-algorithm=aes-256,aes-128
/ip ipsec proposal
set [ find default=yes ] auth-algorithms=sha256,sha1

/interface bridge
add name=l2tp_bridge
/ip pool
add name=l2tp_pool ranges=10.9.0.2-10.9.0.10
/ppp profile
add bridge=l2tp_bridge change-tcp-mss=yes dns-server=8.8.8.8 local-address=\
    10.9.0.1 name=l2tp_server remote-address=l2tp_pool use-encryption=\
    required
/interface l2tp-server server
set authentication=chap,mschap1,mschap2 default-profile=l2tp_server enabled=\
    yes ipsec-secret=password max-mru=1460 max-mtu=1460 use-ipsec=yes

/ppp secret
add local-address=10.9.0.1 name=l2tp_client password=password profile=\
    l2tp_server remote-address=10.9.0.2 service=l2tp