You can try RouterOS today and turn a PC into a router, if desired.

In 1997, MikroTik created RouterOS, the software that runs their routers today. MikroTik was founded in 1996 and is located in Riga, Latvia. Why Choose Mikrotik Hex S Gigabit Ethernet Router? IPsec hardware encryption (~470 Mbps) and The Dude server package is supported, a microSD slot on it provides improved r/w speed for file storage and Dude. The device has a USB 2.0, PoE output for Ethernet port #5 and a 1.25Gbit/s SFP cage. It is affordable, small, and easy to use, but at the same time comes with a very powerful dual core 880 MHz CPU and 256 MB RAM, capable of the advanced configurations that RouterOS supports. Compared to the hEX, the hEX S also features an SFP port and PoE output on the last port.

Create the VPN User for Road Warrior Access.Mikrotik Hex S is a five port Gigabit Ethernet router for locations where wireless connectivity is not required.

/ip firewall nat add action=masquerade chain=srcnat out-interface=ether1 src-address-list=VPN_POOL.

Create the NAT for Client Internet Access.

Create the Address List of the VPN Clients for Internet Access.

/interface l2tp-server server set enabled=yes ipsec-secret=IPSECPASSWORD use-ipsec=required.

/ppp profile add change-tcp-mss=yes local-address=192.168.60.1 name=VPN remote-address=VPN_POOL use-encryption=yes.

Create the IP Pool for Dynamic IP Address Allocation.

This guide assumes you already have the required ports and services (UDP500, UDP4500, UDP1701, and L2TP) allowed on the input chain of your MikroTik.

In this example we are creating a L2TP with IPSEC server with dynamic IP Address allocation and a Masqurade SRCNAT rule using an address list for internet access.

Mikrotik l2tp firewall