SSTP Error

RouterOS Beginner Basics
1

Hello All

PPP Server : SSTP
<
enabled: yes
port: 443
max-mtu: 1500
max-mru: 1500
mrru: disabled
keepalive-timeout: 60
default-profile: SSTPvpnProfile
authentication: pap,chap,mschap1,mschap2
certificate:
verify-client-certificate: no
force-aes: no
pfs: no
tls-version: any

**Certificate Status : KLT
Authentication : Radius
PPP Profile:

/protocol tab> use Encreption = required**

Problem :
Clients Side Error message:
Plathform: windows 10 with SSTP connection.
error message :
" The remote connection was denied because the username and password combination you provide is not recognized, or the selected authentication protocol is not permited on the remote access server "

I can connect with the same username/password via L2TP IPsec.

Server side:
user < username> authentication failed.

Kindly reply me if you have any Idea.

Thank You
Best Regards
AliYashar

2

Users (aka secrets) have an option to define for protocols they are valid for. Select ALL or SSTP.

Also if your radius server is Windows Server 2012, you need to use reversible encryption. This can be set globally or on a per user basis I think. If you set it globally via group policy, you’ll need to reboot the server. Then reset the password so it’s now using reversible encryption. I’m not sure if this applies to only MSChap and MSChap2 auth mechanisms. If LT2P is using IPSec, this makes sense why it works when SSTP/PPTP does not.

3

Hi,
Thank you for replying.

Users (aka secrets) have an option to define for protocols they are valid for. Select ALL or SSTP.

I already tried, but same Error.

Radius Server : NTTAC Plus Software on Windows 2008-R2




Best Regards
AliYashar
PPP-SSTP-Error.JPG