Community discussions

MikroTik App
 
User avatar
floaty
Member
Member
Topic Author
Posts: 340
Joined: Sat Oct 20, 2018 1:24 am
Location: 52°08'32.34"N 14°39'05.0"E

sstpc terminating... - negotiation timeout

Sat Dec 09, 2023 5:46 pm

tried to connect with an sstpc client at Mikrotik-SSTP server ... connection lasts only ~60sec
LCP is shutting down with nego-timeout ... seems sstpc is not answering certain control-protocol requests* ... point is the unanswered protocols are disabled in the sstp-server ppp-profile ?!
this a bug or are feature ? ... are there any known workarounds ?
.
*) Windows- and Mikrotik-clients working flawless
.
16:01:27 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: rcvd IPCP ConfAck id=0x1
16:01:27 echo: sstp,ppp,debug,packet     <addr 172.XX.YY.9>
16:01:27 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: rcvd IPCP ConfReq id=0x2
16:01:27 echo: sstp,ppp,debug,packet     <addr 0.0.0.0>
16:01:27 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: sent IPCP ConfNak id=0x2
16:01:27 echo: sstp,ppp,debug,packet     <addr 172.XX.YY.47>
16:01:27 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: rcvd IPCP ConfReq id=0x3
16:01:27 echo: sstp,ppp,debug,packet     <addr 172.XX.YY.47>
16:01:27 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: sent IPCP ConfAck id=0x3
16:01:27 echo: sstp,ppp,debug,packet     <addr 172.XX.YY.47>
16:01:27 echo: sstp,ppp,debug <sstp-exampleuser>: IPCP opened
16:01:27 echo: sstp,ppp,info <sstp-exampleuser>: connected
16:01:57 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: rcvd LCP EchoReq id=0x1
16:01:57 echo: sstp,ppp,debug,packet     <magic 0x46c37fff>
16:01:57 echo: sstp,ppp,debug,packet  <sstp-exampleuser>: sent LCP EchoRep id=0x1
16:01:57 echo: sstp,ppp,debug,packet     <magic 0x68b869a8>
  (2 messages discarded)
16:02:27 echo: sstp,packet 00 00 00 00
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: LCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: LCP closed
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: CCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: BCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: BCP down event in starting state
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: IPCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: IPCP closed
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: IPV6CP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: IPV6CP down event in starting state
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: MPLSCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: MPLSCP down event in starting state
16:02:27 echo: sstp,ppp,info <sstp-exampleuser>: terminating... - negotiation timeout
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: LCP lowerdown
16:02:27 echo: sstp,ppp,debug <sstp-exampleuser>: LCP down event in starting state
16:02:27 echo: sstp,ppp,info,account exampleuser logged out, 59 1034 412 17 10 from 192.XXX.YYY.142
16:02:27 echo: sstp,ppp,info <sstp-exampleuser>: disconnected
.
ppp.PNG
...
.
after further investigation
... must be something else ... container-related ... sstps on another client works without connection-loss ... seems the host-system is not properly handing-over/filtering some frame-types ... odd
You do not have the required permissions to view the files attached to this post.
 
User avatar
floaty
Member
Member
Topic Author
Posts: 340
Joined: Sat Oct 20, 2018 1:24 am
Location: 52°08'32.34"N 14°39'05.0"E

Re: sstpc terminating... - negotiation timeout

Thu Dec 14, 2023 11:49 pm

installed a second container with sstp-client version 1.0.13 (which runs stable on my other system)
and it's working too ... ! stable, no disconnects
so maybe a thing in sstpc version 1.0.18 ... ? ... or in a related library ? ... who knows
not a Mikrotik thing ... case closed
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1224
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: sstpc terminating... - negotiation timeout

Wed Jul 10, 2024 6:42 pm

Sorry for a late response, but I just faced the same issue just now: that's a bug in sstpc (I use 1.0.16) pertaining the acceptance of an ACK control package, and I found a possible solution in the depth of the internet.

If you can compile sstpc yourself, in file src/sstp-state.c find the function sstp_state_handle_ctrl (around line 356) and add a single line...
case SSTP_MSG_CONNECT_ACK:
        sstp_state_connect_ack(state, type, buf);
        break;
needs to be
case SSTP_MSG_CONNECT_ACK:
        sstp_state_connect_ack(state, type, buf);
        sstp_state_accept(state);
        break;
Then just rebuild and replace your binary in /usr/sbin (btw, you will find it in /src/.libs, and you need to stop your sstp tunnels to be able to overwrite it).

I don't know if this solves the root cause, but it works for me.

Who is online

Users browsing this forum: Bing [Bot], MSM and 117 guests