If you want split-tunnel only to LAN, omit NAT.
The heart of the setup was the itself. In the PPP > Interface window, Alex clicked the L2TP Server button. He checked the Enabled box and, most importantly, set Use IPsec to "yes". He typed a strong IPsec Secret —a pre-shared key that he would later share with his team to encrypt their data. mikrotik l2tp server setup full
Setting up L2TP/IPsec on MikroTik is straightforward once you understand the interplay between PPP profiles, firewall rules, and IPsec policies. The solution is fast, secure, and compatible with essentially every device on the planet. If you want split-tunnel only to LAN, omit NAT