Как установить SSTP на Mikrotik

Пошаговая инструкция

• 1

  To ease the setup, copy these commands and paste them into your Mikrotik's Terminal.
  Please change the username, password, hostname and range variables.
  Please note that the range is set to the default Mikrotik dhcp range, so change it according to your situation.
  You can also set the range to 192.168.88.10-192.168.88.15 to only route those IP addresses through VPN.
  To find the address of the server address for the location you wish to connect to, visit server list in the members area.
  The VPN interface is automatically active.
  :global username "USERNAME"
:global password "PASSWORD"
:global range "192.168.88.0/24"
:global hostname "nl.hide.me"


• 2

  Set up the SSTP interface for the connection.
  /interface sstp-client add authentication=mschap2 connect-to=[:put $hostname] disabled=no name="hide.me SSTP" password=[:put $password] profile=default-encryption tls-version=only-1.2 user=[:put $username]


• 3

  Next, add the firewall NAT and mangle rules to handle traffic.
  /ip firewall mangle add action=mark-routing chain=prerouting new-routing-mark=SSTP passthrough=yes src-address=[:put $range]
/ip firewall nat add action=masquerade chain=srcnat out-interface="hide.me SSTP"


• 4

  Mark all the packets with a routing mark.
  /ip route add distance=1 gateway="hide.me SSTP" routing-mark=SSTP


• 5

  Unset previously set variables so they don't reside in the memory.
  :set hostname "";:set password "";:set username "";:set range ""


• 6

  You can check here if you have successfully connected, and your traffic is properly routed.