Community discussions

MikroTik App
 
voiceland
just joined
Topic Author
Posts: 15
Joined: Wed Feb 20, 2013 2:21 pm

SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:24 pm

Dear all,

I would like to give me some help for setup tunnelling between two Mikrotik Routerboards using SSTP without certifications. I read here that this can be done but I can't find how to do it.

http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP
If both client and server are Mikrotik routers, then it is possible to establish SSTP tunnel without certificates and with any available authentication type.

Thank you all!
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7054
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:28 pm

Simply do not import and set certificates in config .. the rest is the same.
 
voiceland
just joined
Topic Author
Posts: 15
Joined: Wed Feb 20, 2013 2:21 pm

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:40 pm

I get error tls shutdown from the client side and handshake failed from the server side.

???
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7054
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:42 pm

post your sstp server config and client config.
 
voiceland
just joined
Topic Author
Posts: 15
Joined: Wed Feb 20, 2013 2:21 pm

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:48 pm

Client Side
Flags: X - disabled, R - running
0 X name="sstp-out1" max-mtu=1500 max-mru=1500 mrru=disabled connect-to=X.X.X.X:443 http-proxy=0.0.0.0:443 certificate=none
verify-server-certificate=no verify-server-address-from-certificate=no user="XXXXXXXX" password="XXXXXXX"
profile=default-encryption keepalive-timeout=60 add-default-route=no dial-on-demand=no authentication=pap,chap,mschap1,mschap2

Server Side
enabled: yes
port: 443
max-mtu: 1500
max-mru: 1500
mrru: disabled
keepalive-timeout: 60
default-profile: default
authentication: pap,chap,mschap1,mschap2
certificate: none
verify-client-certificate: no

Thank you!
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7054
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:55 pm

What RouterOS version are you using and does anything else uses port 443 on any of routers (check ip services)?
 
voiceland
just joined
Topic Author
Posts: 15
Joined: Wed Feb 20, 2013 2:21 pm

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 2:58 pm

I checked ip services and 443 is disabled. I changed server port to 65000

server has version 5.23 and client 5.22

Thank you!
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7054
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 3:06 pm

contact support[at]mikrotik.com and send supout rif files from both routers.
 
voiceland
just joined
Topic Author
Posts: 15
Joined: Wed Feb 20, 2013 2:21 pm

Re: SSTP between Routerboards without certifications

Wed Feb 20, 2013 3:13 pm

Done!

Thank you

Who is online

Users browsing this forum: No registered users and 100 guests