/ppp profile add change-tcp-mss=yes comment="PIA VPN" \
dns-server=209.222.18.222,209.222.18.218 name=privateinternetaccess \
only-one=no use-compression=no use-encryption=required use-ipv6=no \
use-mpls=no use-upnp=no

/interface l2tp-client add comment="PIA VPN Austria" \
connect-to=austria.privateinternetaccess.com disabled=no \
name=pia-au-l2tp password=[pass] \
profile=privateinternetaccess user=[user]

/ip firewall mangle add action=mark-routing \
chain=prerouting comment="PIA VPN Austria" \
new-routing-mark="PPTP RM" passthrough=yes \
src-address=192.168.88.2-192.168.88.254

/ip firewall nat add action=masquerade chain=srcnat \
comment="PIA VPN Austria" out-interface=pia-au-l2tp

/ip route add comment="PIA VPN Austria" disabled=yes \
distance=1 gateway=pia-au-l2tp routing-mark="PPTP RM"