Dear all,
I would like to give me some help for setup tunnelling between two Mikrotik Routerboards using SSTP without certifications. I read here that this can be done but I can’t find how to do it.
http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP
If both client and server are Mikrotik routers, then it is possible to establish SSTP tunnel without certificates and with any available authentication type.
Thank you all!
mrz
February 20, 2013, 12:28pm
2
Simply do not import and set certificates in config .. the rest is the same.
I get error tls shutdown from the client side and handshake failed from the server side.
???
mrz
February 20, 2013, 12:42pm
4
post your sstp server config and client config.
Client Side
Flags: X - disabled, R - running
0 X name=“sstp-out1” max-mtu=1500 max-mru=1500 mrru=disabled connect-to=X.X.X.X:443 http-proxy=0.0.0.0:443 certificate=none
verify-server-certificate=no verify-server-address-from-certificate=no user=“XXXXXXXX” password=“XXXXXXX”
profile=default-encryption keepalive-timeout=60 add-default-route=no dial-on-demand=no authentication=pap,chap,mschap1,mschap2
Server Side
enabled: yes
port: 443
max-mtu: 1500
max-mru: 1500
mrru: disabled
keepalive-timeout: 60
default-profile: default
authentication: pap,chap,mschap1,mschap2
certificate: none
verify-client-certificate: no
Thank you!
mrz
February 20, 2013, 12:55pm
6
What RouterOS version are you using and does anything else uses port 443 on any of routers (check ip services)?
I checked ip services and 443 is disabled. I changed server port to 65000
server has version 5.23 and client 5.22
Thank you!
mrz
February 20, 2013, 1:06pm
8
contact support[at]mikrotik.com and send supout rif files from both routers.