Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save rochmad/274f0fa3c240a5ff8c1e21d90db9a878 to your computer and use it in GitHub Desktop.
Save rochmad/274f0fa3c240a5ff8c1e21d90db9a878 to your computer and use it in GitHub Desktop.
Mikrotik SSTP VPN with Singed Certificates Comodo SSL, CRL Enable
https://wiki.mikrotik.com/wiki/Manual:Interface/SSTP
how to enable SSTP with Comodo SSL,
first generate like normaly,
and you will get
crt in pk8 format, and convert it to crt,
and then import to mikrotik server,
key from generate, and crt,
###########
mikrotik:
/certificates
import file-name=star.0mads.com.crt
import file-name=star.0mads.com.key
############
create pool
ip pool add name=SSTP_Pool_Local_Address ranges=172.16.5.2-172.16.5.100
ip pool add name=SSTP_Pool_Remot_Address ranges=172.16.5.102-172.16.5.200
############
create profile
/ppp
profile add name=SSTP_Profile local-address=SSTP_Pool_Local_Address remote-address=SSTP_Pool_Remot_Address dns-server=172.16.10.1,8.8.8.8 use-encryption=yes use-compression=yes only-one=default
############
create user secret
/ppp
secret add name=user1 password=user1 service=any profile=SSTP_Profile
############
############
enable sstp on mikrotik
/interface sstp-server server
print
set enabled=yes authentication=mschap1,mschap2 force-aes=yes pfs=yes tls-version=any default-profile=SSTP_Profile port=443 certificate=star.0mads.com.crt
now, you shuldable to conect sstp via IP public
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment