Skip to main content
Version: current

server


interface/sstp-server/server

Type: Settings Directory

ArgumentTypeDescription
enabledboolEnables or disables the SSTP server.
portnumListening port for the SSTP server.
max-mtunumMaximum Transmission Unit.
max-mrunumMaximum Receive Unit.
mrrunumMaximum packet size that can be received on the link. If a packet is bigger than tunnel MTU, it is split into multiple packets, allowing full-size IP or Ethernet packets to be sent over the tunnel.
keepalive-timeoutenum (disabled) { disabled:0 }Keepalive timeout in seconds.
default-profileenumSpecifies which PPP profile configuration is used when establishing the tunnel.
authenticationubit (pap, chap, mschap1, mschap2)Allowed authentication methods. By default all methods are allowed.
certificateenum (none) { none:0 }Server certificate from the certificate store.
verify-client-certificateboolVerifies the client certificate against the router's certificate store.
pfsenum (no | yes | required) { no:0, yes:1, required:2 }Specifies which TLS authentication to use. yes - TLS uses ECDHE-RSA and DHE-RSA. required - uses only ECDHE.
tls-versionenum (any | only-1.2) { any:0, only-1.2:2 }Specifies which TLS version to allow.
ciphersubit (aes256-sha, aes256-gcm-sha384)Allowed ciphers.