All tutorials
SSTP
SSTP Client Setup
SSTP (Secure Socket Tunneling Protocol) uses SSL/TLS encryption over port 443. It works well in networks that block other VPN protocols.
Before You Start
- You need a MikRouter remote account with an active subscription.
- Open Winbox and connect to your MikroTik router via MAC or IP address.
- Have your remote account credentials ready:
PPP Username,PPP Password, andServer Address. - These credentials are available in your dashboard under the remote details page.
1
Open PPP Interface
In Winbox, navigate to PPP.
2
Add SSTP Client
Click the
+ (Add) button and select SSTP Client from the dropdown list.3
Configure General Tab
| Field | Value | Note |
|---|---|---|
| Name | sstp-mikrouter | Any name you prefer |
4
Configure Dial Out Tab
Switch to the Dial Out tab and enter your credentials.
| Field | Value | Note |
|---|---|---|
| Connect To | server-address.mikrouter.com | Server address (no port) |
| Port | 443 | SSTP port |
| Proxy | N/A | Leave empty |
| Proxy Port | 443 | Default |
| Certificate | none | Leave as none |
| TLS Version | any | Leave as any |
| Verify Server Certificate | No | Uncheck this |
| Verify Server Address From Certificate | No | Leave unchecked |
| PFS | No | Disable |
| Ciphers | Uncheck all | Leave all ciphers unchecked |
| User | your-ppp-username | Your PPP username |
| Password | your-ppp-password | Your PPP password |
| Profile | default-encryption | Select this profile |
| Keepalive Timeout | 60 | Default value |
| Dial On Demand | No | Leave unchecked |
| Add Default Route | No | Leave unchecked |
| Allow | mschap2, mschap1, chap, pap | Check all four |
5
Apply and Connect
Click
Apply then OK. The SSTP client will connect using SSL encryption. Check the interface list for the R (Running) flag.6
Verify Connection
Check under PPP›Interface that the status is
connected. SSTP typically takes a few seconds longer to negotiate the SSL handshake.