Questions tagged [sstp]
Secure Socket Tunneling Protocol (SSTP) is a form of VPN tunnel that provides a mechanism to transport PPP or L2TP traffic through an SSL 3.0 channel
62
questions
0
votes
2
answers
70
views
How to change MS-SSTP (RRAS) server port?
I have a webservice on port 443 and 80 in IIS. I want run SSTP Server on port 8443. How can I change the default port (443) to 8443?
0
votes
1
answer
230
views
How to run nginx and ocserv on the same IP:Port using the same domain name?
How to run nginx and ocserv on the same IP:Port using the same domain name? Just like how a similar thing is possible by using SSTP protocol, if I am not mistaken. I am using Ubuntu 20.04.
- 48
0
votes
0
answers
170
views
SETTING UP A SSTP VPN SERVER (cannot establish the connection)
Today I wanted to do some labs of SSTP Windows Server VPN.
What I have done so far, it’s to build a Windows server 2019 as a Domain Controller and as a Certificate Authority.
From my CA I have created ...
0
votes
0
answers
335
views
Securing Windows Server NPS/SSTP
Looking at our NPS logs I see we're getting hammered; some online actor is doing a brute force on various login names and passwords.
In general this isn't an issue... yet. It doesn't appear that a ...
- 381
1
vote
0
answers
3k
views
Is it possible to hack a server with a SSTP_DUPLEX_POST request?
How is it possible to use the method : SSTP_DUPLEX_POST and the url : /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ to hack a server ?
I have this request in my logs from a well known malicious IP ...
- 11
0
votes
1
answer
839
views
RRAS SSTP VPN and DNS Resolution with multiple suffix
So we have domain example.com and have our active directory setup as ad.example.com. When I VPN (SSTP on RRAS) if I ping any thing (eg server.ad.example.com) it gives me an internal ip address (...
- 321
0
votes
0
answers
43
views
VPN into work network - Suggestions, Concerns
I have been tasked to setup a vpn into our company. We have a single windows 2016 server that is acting as everything. A DC, AD, File Server, Web Server, SQL Server, and now perhaps a VPN Server. I ...
0
votes
1
answer
431
views
IKEv2 certificate error but SSTP successfully connects Windows 10 pro / Windows Server 2019
I'm using Windows server 2019 (installed roles: AD DC, CA, DHCP, DNS, IIS, VPN).
my client is Windows 10 pro.
before installing the Online responder role and having a CRL server, IkEv2 was working, ...
user299093
1
vote
0
answers
383
views
SSTP VPN works but no Internet connection on Ubuntu
I've established SSTP VPN client on my Ubuntu connecting to SSTP VPN server.
I'm using http://sstp-client.sourceforge.net/ SSTP VPN client. And with this network manager plugin https://github.com/...
- 109
0
votes
1
answer
1k
views
SSTP VPN connection fails after updating / removing an IIS certificate
After I removed / updated an IIS certificate, I am unable to maintain an SSTP VPN connection with the server. As far as I recall the certificate was NOT used for authentication. Users authenticate ...
- 131
0
votes
0
answers
712
views
MS SSTP Server with multiple certificates / hostnames
We currently have an SSTP server (running on Windows Server 2008 R2 but it is being migrated to Windows Server 2016). At the moment, the server is configured using a wildcard certificate for one of ...
- 381
1
vote
0
answers
1k
views
Self-signed certificate for SSTP VPN server
I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
- 419
1
vote
1
answer
558
views
HAproxy.cfg syntax: how to recognise SSTP other than by SNI
I've recently managed to configure HAproxy.cfg to run HTTPS and SSTP on the same port, and can recognise some website traffic by SNI. However, as I have multiple domains I would prefer to recognise ...
- 620
1
vote
1
answer
2k
views
How to configure HAproxy with SSTP and HTTPS
I'm using a MikroTik router with SSTP, and I have a Fedora server running httpd with HTTP and HTTPS, but I only have a single IPv4 address from my ISP.
I currently have SSTP working on port 444, but ...
- 620
0
votes
1
answer
1k
views
Redirect SSTP traffic from Ubuntu Apache2 server to internal Windows Server
So this weekend i have been working on migrating my apache2 server to a docker container which i have no issues with.
I currently have a windows server with SSTP and Exchange 2016 both using port 443 ...
- 197
-1
votes
1
answer
696
views
Install SSTP server on Windows 2008 (not R2). Possible?
I am trying to install RRAS on Windows 2008 (original Vista kernel version, not R2) in order to implement SSTP but after I configure RRAS, there is nothing in the security settings for setting the ...
0
votes
0
answers
1k
views
SSTP VPN on Windows Server 2016 works in LAN but not from WAN
I was setting up SSTP VPN on Windows Server 2016 at home using this tutorial.
This works using a LAN client with Windows 10. The eventlog on the client shows:
The user xxx has established a ...
- 111
1
vote
2
answers
4k
views
Windows Server 2012 SSTP stops listening to port 443, how do I resume listening without a server restart?
I have a Windows 2012 R2 Standard Server setup with an SSTP VPN that is working for the most part. I have been able to connect to this VPN from an external computer and use everything properly.
The ...
- 141
0
votes
1
answer
1k
views
Can I set up a Windows SSTP VPN service without exposing the webserver?
I am trying to set up a SSTP VPN service in Windows 2016.
I don't want to advertise to the world that my network exists let alone that I have a running webserver, but because the SSTP service runs ...
- 1,583
0
votes
0
answers
824
views
How to create site-to-site VPN from CentOS Server to Windows Server
For a small business: at one site is windows 2012 server, (with ssl certificate), already running as a SSTP VPN Server.
At a remote site, is a live-to-public CentOS webserver running CFS.
...
- 857
1
vote
2
answers
2k
views
Can't access Internet while connected to SSTP VPN on Azure
I'm able to connect successfully to my SSTP VPN on a Windows 2012 R2 machine running RRAS on Azure, but once connected, I can't access the internet.
I understand that I could workaround this issue by ...
- 61
1
vote
0
answers
5k
views
SSTP VPN Certificate Revocation issue
I have Windows 2012 Server with RRAS set up on it to allow clients to connect via SSTP VPN.
I have correctly set up the certificate on the server and issued it to clients.
Whilst my clients that ...
- 11
1
vote
1
answer
4k
views
Windows Server 2012 SSTP VPN/Cant Connect to SSTP VPN Server
I have setup a VPN server with Server 2k12 and i have set it up behind an NAT and external/remote clients can connect via PPTP just fine. I was having issues with L2TP but i further read that L2TP has ...
- 197
3
votes
1
answer
6k
views
Setting up RRAS (SSTP) with public SSL certificate and public/private name mismatch (WS2012R2)
I have a domain joined WS2012R2 server I want to use for a VPN (SSTP). The machine itself is behind a NAT router (although it has a fixed IP and forwarding port 443 to it is straightforward).
I want ...
0
votes
1
answer
11k
views
Cannot connect to SSTP VPN Error 20227
I have a working PPTP VPN on Windows Server 2008 and I can connect to this PPTP VPN on a Windows 10 notebook with an AD-User.
But when I am trying to switch to SSTP on my Windows Server by importing ...
- 1
0
votes
1
answer
1k
views
SSTP: Certificate issue
So I'm building an SSTP VPN.
I get the following error when trying to connect to the VPN:
A certificate chain processed, but terminated in a root certificate which is not trusted by the trust ...
- 306
0
votes
1
answer
361
views
Is RRAS SSTP VPN using publicly signed certificate a bad idea?
Most guides for deploying SSTP on RRAS recommend setting up a private CA using AD CS, with all the necessary steps that come with that to issue a server authentication certificate and have it trusted ...
- 1,852
2
votes
3
answers
7k
views
Cannot submit certificate requests to root CA
I'm aware this question has been asked before, but none of the solutions have helped me.
The reason I set up a CA was solely for the purpose of creating an SSTP VPN, so everything is all on one ...
3
votes
2
answers
2k
views
IPv6 with IPv4 over RRAS SSTP VPN from Client that only has IPv4 access
I'm setting up Server 2012 R2 RRAS to be a SSTP VPN. I've got IPv4 working perfectly. My environment is dual stack (v4 and v6). When I enable IPv6 on the VPN my client gets a valid address but is ...
- 321
0
votes
1
answer
1k
views
Windows Server: VPN clients cannot see LAN clients
I'm trying to set up a server running Windows Server 2012 R2 to host VPN (RRAS). I have gotten VPN connections to work with certificates (SSTP). Now I need the VPN clients to be able to see LAN ...
- 35
-2
votes
2
answers
303
views
Networking VPN expert out there? Should Remote VPN "Client" be pingable/reachable FROM the VPN server?
I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER.
BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
- 483
1
vote
1
answer
4k
views
VPN SSTP windows client can not ping or connect to VPN server but it can talk to every other PC on the local LAN that VPN server is on
So I have an SSTP (with native Windows client) working fine in a sense.
My windows client's local IP is 192.168.10.11 , so its local network is:
192.168.10.x
The Remote VPN server is behind a router ...
- 483
0
votes
0
answers
611
views
Deploying SSTP VPN on Windows 2012 - How to route packets to other servers?
I've finally managed to deploy an SSTP VPN between my Windows 2012 (non R2) server and Windows 7 client. It's amazing how much easier it work with a real certificate and avoiding the self-signed ...
- 661
3
votes
0
answers
2k
views
Scheduled RasMan connection to SSTP VPN fails only at night
Background
I have an SSTP VPN with a self-signed certificate. It's running on a physical instance of Server 2008 R2 on our LAN. Three off-network workstations are scheduled to connect to the VPN "at ...
- 243
1
vote
3
answers
12k
views
Windows Server 2012 R2 VPN - connects to network but cannot access server
I've configured Windows Server 2012 R2 SSTP VPN and for the most part it appears to be functioning normally. The remote machine connects, is allocated an IP address in the LAN, and has access to ...
- 121
3
votes
3
answers
10k
views
Provide SSTP VPN and normal HTTPS Websites over the same Port and IP?
In my little lab I want to use SSTP VPN AND a HTTPS-Webpage, which should be accessible from the internet. I just have 1 public IP and the lab is behind NAT (Port forwarding 443). SSTP already works ...
- 206
0
votes
1
answer
343
views
Can connect through SSTP but not PPTP?
I have a window server 2008 r2 box behind a a Netgear AC1750 router. I've set up RRAS for a VPN and can successfully connect using SSTP, but if I try to connect to the VPN using PPTP I get a timeout ...
- 111
0
votes
1
answer
1k
views
Windows Server 2008 R2 creating a multi-year client certificate using the IIS certsrv page while deploying SSTP VPN
I am trying to follow instructions on Technet about deploying a Standard (non-enterprise) SSTP based VPN) that were originally written for Server 2008, but I am using Server 2008 R2, I have gotten as ...
- 1,195
1
vote
0
answers
2k
views
SSTP VPN connects, then disconnects
I'm trying to setup an SSTP VPN on Windows Server 2012 which works fine when I connect from the same subnet as the RAS server but does not work when I configure PAT or when I try to route the traffic ...
- 11
0
votes
1
answer
23k
views
Error 0x8007274C connecting via SSTP VPN to Windows 2008r2 server
I'm setting up a VPN using a self-signed certificate. My certificate is was generated on the server and is installed on the server. It shows up in the MMC console under "Certificates (Local Computer) /...
- 425
0
votes
1
answer
499
views
Configuring SSTP VPN server on Win2008r2 when server is at a dynamic dns address
I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting ...
- 425
0
votes
1
answer
2k
views
Windows Server 2008 R2 - RAS SSTP - HTTP 503 Service is unavailable
I have a Windows Server 2008 R2 machine that has the following configuration:
It's a domain controller
It runs IIS and serves the Default Website with HTTP bindings 0.0.0.0:80 and [::]:80 and with ...
- 2,290
0
votes
2
answers
6k
views
Why can't I change the sstp vpn's port
I'm trying to change sstp vpn's port by changing the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SstpSvc\Parameters\ConfigStore\ ListenerPort key of my registry but when I change it ...
- 138
0
votes
1
answer
600
views
Correctly setting up SSTP on Amazon EC2 Server 2008 Domain Controller
I have successfully setup up a VPN connection to an EC2 instance of Windows Server 2008 using SSTP. But the setup seems a little hacked together and needs some tweeking. My first problem/question is ...
- 383
1
vote
3
answers
4k
views
Setting up a VPN on Windows 2008 R2, should I use PPTP or SSTP?
I'm setting up a VPN test server, on Windows 2008 R2. I seem to remember that PPTP isn't ideal, as on a Cisco firewall you need to allow quite a large range of ports open (with the GRE protocol too?)
...
- 547
10
votes
2
answers
28k
views
SSTP client disconnects shortly after successfully connected to VPN
I'm successfully authenticating and connecting to a SSTP VPN (on windows 2008) from my windows 7 machine, but for some reason, the connection is disconnected about a 1-2 seconds after it's established....
- 367
0
votes
1
answer
252
views
Have some questions about setting up a VPN to my private cloud servers
TLDR:
I wish to VPN to our cloud servers. Is there any free VPN server software that runs on W2K8?
No, I don't want to :
Download 3rd party software for the -clients- (We want to use the built in VPN ...
- 6,518
3
votes
2
answers
19k
views
Internet Explorer not working after establishing a VPN connection
I have a problem which is constantly appearing on each Windows 7 computer I'm using whenever I establish a VPN connection.
The problem appears only if using a proxy server for Internet access; it ...
- 70.3k
3
votes
2
answers
2k
views
SSTP on Windows 2008 cannot ping in either direction
I have the following setting going on.
Server: Configured windows 2008 server as AD, DHCP, DNS, CA and RRAS. To make long story short, RRAS can accept SSTP connection and clients get connected fine. ...
2
votes
1
answer
2k
views
Win 2008 R2 SSTP Certificate
I have a Win 2008 R2 server running on AWS EC2 and need the ability to VPN to it. PPTP isn't an option given EC2 firewall restrictions (no GRE routing).
I am planning to setup SSTP and it is my ...
- 163