That is a security feature that was developed since 6.44! You need to set both Remote and Local Peer IP! Before there was just remote peer IP!

Thanks for this comment, it saved me. can you point me to exact release note, where this feature was introduced? I'm unable to find it...

Note that router C required some static routes. It has automatic/dynamic routes to subnets 10.0.60.0/24 and 10.0.80.0/24 because it has interfaces on those nets. It doesn't automatically know about 10.0.85.0/24 nor 10.0.84.0/24, and because router C is my real internet gateway, it has a default rou...

Got it working. Take two MikroTiks and created lab setup on table, IPv6 routed just fine through SSTP tunnel. After that implemented in real life. Why this setup does not work from the beginning, I don't know. How to (from this forum copy-paste): 1)IPv6 over SSTP is possible. Make sure that ppp prof...

Hello. Can anybody share example how to setup IPv6 routing over established SSTP VPN tunnel (running on IPv4)? SSTP tunnel between two MikroTik routers, both routers has IPv4 and IPv6 addresses. I have seen few posts in different topics, but was unable to get IPv6 routing to work. Currently I use 6t...

I did a rollback from 6.41.3 to 6.40.6 and problem gone! Congratulations, RouterOS writers, you have +1 bug in new bridge implementation, as I think. As I wrote in my first post, problem rised about new year, so no doubts, I did upgrade for newest and latest firmware on RB450G unit. Let me repeat ag...

Latest capture was done on router. TCP out of order - is it ok for first packet was was intended to start tcp session?

attached capture made on MikroTik when SSTP Client PC1 tried to connect to PC2 with RAdmin.
PC1 10.1.3.69 Radmin Client -> PC2 10.1.1.51 RAdmin Server

Client sends SYN and server sends back SYN,ACK. But client sends SYN again, so it looks like it didn't receive the first SYN,ACK. If that screenshot is from server, then look where exactly the SYN,ACK gets lost (logging rules on MikroTik router can help you). sorry, forget to mention: wireshark log...

hello. I got weird problem with Windows 10 PC and SSTP server on MikroTik router. Good scenario: PC1 (win10) on Internet can access PC2 (win10) behind MikroTik, when Remote Desktop or Remote Admin ports are NAT-ed from MikroTik Public IP to IP of PC2. Bad scenario: SSTP client on PC1 connected to SS...

Temporary workaround:
set netwatch script to monitor remote ipv6 address. If address down, execute code: /ip firewall connection { remove [find protocol=ipv6] }

Hello. For a long time (almost a year) on different software versions we have one problem: 6to4 tunnel stops transfer traffic. It works right after creation, works for a week, may be months, but in the end it dies. There is no Rx data on 6to4 interface on both sides. The only possible solution - del...

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 works OK. But I found, what router request for certificate is impossible to sign with Windows 2008 CA (Web server offline cert template). Event viewer from CA server: Active Directory Certificate Services denied request 3532 because The req...

routeros-mipsbe-6.26rc20 - SSTP client Windows 8.1 update 1 - works OK.

We are currently fixing last issues with 6.26:

- SSTP issues with Windows 8.1

routeros-mipsbe-6.26rc16 - SSTP with Win 8.1 - not fixed!!!!

We are aware of the problem, finally we repeated the problem.
Fix will be available very soon.

ROS 6.26 RC16 - SSTP problem with Windows 8.1 Client not fixed. On Client error 619.
On router: see attachment

Hi. We got a problem with 5.0RC4, and rolled back to 5.0RC3. Setup: Windows 2008R2 AD, NAP ( Radius) + Mikrotik 411AR with 5.0RC4. Wireless setup - Access point wtih two SSID: 1) WPA2 AES EAP (Radius auth) 2) WPA2 AES PSK (preshared key) When I install 5.0RC4, Windows 7 clients with Radius auth. can...

Hello. I'm interesting in NAP feature suport in Mikrotik OS (Wireless AP mode). I tested D-LINK DWL-3200 software (v.2.50) and want to see the same functionality in Mikrotik product. Do you plan to implement such feature? P.S. NAP - i mean EAPOL authentification and dynamic VLAN assigment by NAP (RA...