0
edits
Changes
Setting up a SSTP tunnel between RUTX and Mikrotik device (view source)
Revision as of 16:48, 30 March 2020
, 16:48, 30 March 2020Protected "Setting up a SSTP tunnel between RUTX and Mikrotik device" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))
Secure Socket Tunneling Protocol (SSTP) is a VPN protocol designed to transport PPP traffic via a secure SSL/TLS channel.
Secure Socket Tunneling Protocol (SSTP) is a VPN protocol designed to transport PPP traffic via a secure SSL/TLS channel.
This article provides a guide on how to configure '''SSTP''' tunnel between RUTxxx (client) and Mikrotik (server) routers.
This article provides a guide on how to configure '''SSTP''' tunnel between RUTXxx (client) and Mikrotik (server) routers.
==Prerequisites==
==Prerequisites==
* One RUTxxx router of any type
* One RUTXxx router of any type
* One Mikrotik router (this configuration example was created using Mikrotik rb750gr3)
* One Mikrotik router (this configuration example was created using Mikrotik rb750gr3)
* Server must have a Public Static or Public Dynamic IP address
* Server must have a Public Static or Public Dynamic IP address
==Configuration scheme==
==Configuration scheme==
[[File:Networking_rutxxx_configuration_example_sstp_mikrotik_topology_v1.png|border|class=tlt-border|1100x1100px]]
[[File:Networking_RUTXxx_configuration_example_sstp_mikrotik_topology_v1.png|border|class=tlt-border|1100x1100px]]
==Mikrotik (server) configuration==
==Mikrotik (server) configuration==
[[File:Networking_rutxxx_configuration_example_sstp_mikrotik_1_v1.png|border|class=tlt-border]]
[[File:Networking_rutxxx_configuration_example_sstp_mikrotik_1_v1.png|border|class=tlt-border]]
==RUTxxx (client) configuration==
==RUTXxx (client) configuration==
Access RUTxxx WebUI and go to '''Service > VPN > SSTP'''. There create a new configuration by writing configuration name and pressing '''Add''' button. It should appear after a few seconds. Then press '''Edit'''.
Access RUTxxx WebUI and go to '''Service > VPN > SSTP'''. There create a new configuration by writing configuration name and pressing '''Add''' button. It should appear after a few seconds. Then press '''Edit'''.
# Write '''Password''' (write the password which you created with this command: secret add name=user profile=vpn-profile password='''password''').
# Write '''Password''' (write the password which you created with this command: secret add name=user profile=vpn-profile password='''password''').
# Upload '''CA cert''' (the file which you exported from MikroTik).
# Upload '''CA cert''' (the file which you exported from MikroTik).
# Press '''Save'''.
# Press '''Save & apply'''.
==Testing configuration==
==Testing configuration==
Try to ping the remote VPN endpoint via '''CLI''' or '''SSH''' using this command:
Try to ping the remote VPN endpoint via '''CLI''' or '''SSH''' using this command:
ping 192.168.8.250
ping 192.168.8.250
[[File:Networking_rutxxx_configuration_example_sstp_mikrotik_5_v1.png|border|class=tlt-border]]
[[File:Networking_RUTXxx_configuration_example_sstp_mikrotik_5_v1.png]]
