SSTP Client marking IP Addresses as DI (Dynamic Invalid)

RouterOS Scripting
1

I have been running into this problem repeatedly lately.

Client – RB951G-2HnD
RouterOS 6.18
Firmware 3.18


Server – CCR1009-8G-1S-1S+
RouterOS 6.18
Firmware 3.10 and 3.18


Client establishes SSTP connection, and server assigns IP address as defined in the username/password (Secret Section).

Sometimes this works fine, other times, the client red-flags the given IP address as DI (Dynamic Invalid).
Deleting the addresses does no good. Disabling the client profile does no good. Rebooting does no good, etc…
The only thing that SOMETIMES works is downgrading the RouterOS to 6.7 and then re-Upgrading to 6.18.

I say SOMETIMES because I have a couple boards that would revert to the problem behavior immediately after re-upgrading to 6.18. I had to keep them on 6.7 for the system to work at all.

Has anyone else experienced this, and have you found a usable solution and/or root-cause?

2

I had. And already described here on the forum. Have you searched before writing…?
Swapping the sides of tunnels was partly solution for me.

3

I’ve searched repeatedly for weeks, and not found anything. Hence my asking.

Perhaps a link to the thread you referenced? Just saying “yep” really doesn’t help much!

4

Update:

I just had this happen on a CCR1009 → CCR1009.

So the problem is not isolated by platform. Both RouterOS 6.18.

I hate to have to downgrade to 6.7 because of the performance losses, but so far, that’s all I know to do!

5

Not so easy to provide such link when using tapatalk on the phone. Sorry for that.

6

Check this, it was written one month ago: http://forum.mikrotik.com/t/sstp-client-in-6-19-vs-server-6-18-problem/81190/1

7

Unfortunately that link didn’t really help. I don’t have the option of swapping around who is the hub and who is the spoke whenever the problem rears it’s head. This has now happened to 6 or 8 of my production units. I’ve tried 6.18 through 6.22 hoping that a newer version has fixed the problem. But it still remains even with 6.22.

To make matters worse, now Mikrotik is sending out units that come from the factory with 6.20 and refuse to downgrade to 6.7 without losing the RouterOS license!!

If anyone has found a fix for this, or a way to reset the DI issue without a RouterOS downgrade, please chime in!!!

8

Hi,

I’m having the same problem CCR1016 ROS v6.28.

Seems the only solution is a reboot. Not good for a core router.

I’ve tried SSTP and L2TP with the same results.

On client PPP link says ‘connected’ but there is no ‘R’ next to the interface.

In IP-Addresses the interface has ‘DI’ and is greyed out.

j.

9

Check my latest findings, solution and ticket status:
http://forum.mikrotik.com/t/sstp-client-in-6-19-vs-server-6-18-problem/81190/15