PPTP Alternative like OpenVPN or SSL Web VPN or SSTP

RouterOS General
1

I am looking for a PPTP VPN Server-Client alternative. I am having issues when my remote client is in an area with a high-end security gateway which blocks PPTP access. I remember other VPN routers I configured having Web SSL VPN which usually settles this issue since it’s using port 80 for VPN Access.

I tried following the Instructions on OpenVPN and SSTP VPN but I’m making no progress because there’s no clear instruction on how to configure even the certificates and the OpenVPN Utility. If anyone has successfully implemented even OpenVPN it would help a lot of us if you could give us any new instructions. Instructions all over the Internet usually gives me issues since they are not clear. I know there are a lot people looking to implement this as well.

Links I tried:
http://wiki.mikrotik.com/wiki/OpenVPN
http://blog.nettraptor.net/?p=446
http://openvpn.net/index.php/open-source/documentation/examples.html\

I somehow have an issue with OpenVPN utility configuration and the certificate I attach to Mikrotik don’t work. A few details with be a great help.

2

Use SSTP. It can generally get through firewalls because it has changable ports.

Here is how to make the certificates for SSTP:
http://wiki.mikrotik.com/wiki/Manual:Create_Certificates

Make sure you are using v5.18 or greater.

3

Hi Janda,
I already followed the instructions in the certificate making process and it was already accepted by Mikrotik. My problem is that the SSTP Client of Microsoft cannot connect me to my SSTP Server. Do you have any idea what client software can I use in order for me to connect to my SSTP Server. Thanks

4

staticjess
Do you use self signed certs ?
If yes you RB should contain CA.crt of your CA and also user PC should have CA self cert in Trusted CA.

5

slech,
I already followed the instructions in this video:

https://www.youtube.com/watch?v=MbGHi35Pe00

But I still receive an error on my Windows 7 VPN Utility.

I think the issue here is the OpenSSL Creation. Is the “Common Name” in OpenSSL the IP Address of the SSTP Server?