If you only want to listen on your public interface (e.g., ether1 ):
/ip firewall nat add chain=srcnat src-address=192.168.100.0/24 dst-address=192.168.88.0/24 action=accept comment="No NAT to LAN" mikrotik l2tp server setup full