The choice of router for the task SSTP server?

Advise on a particular task, up to 70 users it as a peak, up to 50Mb, the client access server SSTP
April 19th 20 at 12:14
2 answers
April 19th 20 at 12:16
Windows server. sstp on Mikrotik pain and suffering.
As someone who has tried, confirm this. - Mckenna.Jacobson commented on April 19th 20 at 12:19
@Mckenna.Jacobson, what is pain and suffering? Works fine on a server migrate all types of PPP and among them SSTP. So Mikrotik best solution. But the domestic RB-750 not for 50 + users. Need for power respectively. Or twist a CCR to the V-world. - Clement_Christiansen commented on April 19th 20 at 12:22
@Clement_Christiansen, sstp on microte very sensitive to the remote client. whether it is a problem of the Protocol, whether microta. if a customer with a microtome in the same city, relatively, it is still bearable, if at a distance - that is just awful. will transmit data with a speed 355 KB / s and no power are not important here. - Guy_Schroeder34 commented on April 19th 20 at 12:25
According to the description on habré should not be there is pain and suffering. An ordinary "under-IPSec", which cut off all that may confuse the hamster. The only thing that load. 70 digging you need to take a serious Mikrotik model, certainly with hardware-based encryption. - Milford_Kohl commented on April 19th 20 at 12:28
@Guy_Schroeder34, Then the question arises - why the choice SSTP and L2TP not? Perfectly both under Windows work. IKEv2 VPN in General proved to be excellent even in an inferior communication channels like mobile Internet. Love yourself people look for complexity. - Clement_Christiansen commented on April 19th 20 at 12:31
@Clement_Christiansen, strongly agree. - Guy_Schroeder34 commented on April 19th 20 at 12:34
The beauty of SSTP is that it looks like https, just recently, it allowed to bypass the lock in Sri Lanka, where neither IPsec or OpenVPN did not work.
In other cases, the best solution is L2TP/IPsec for site-to-site and IPsec tunnel for client-to-site. - alexa.Bergnaum commented on April 19th 20 at 12:37
@Clement_Christiansen,
to turn CCR on virtualke.

362847a5f07be70025985fb62f58d533.jpg - Trey97 commented on April 19th 20 at 12:40
@Trey97, And what's wrong with the CHR option? I have so 5-6 plow routers for different needs. For 5 years no complaints. - Clement_Christiansen commented on April 19th 20 at 12:43
@Clement_Christiansen, nothing in CHR. I was wondering how to run CCR in virtual reality - Trey97 commented on April 19th 20 at 12:46
@Trey97, the Typo was not true to the letter, the CCR is CHR - Clement_Christiansen commented on April 19th 20 at 12:49
@alexa.Bergnaum, Yes, that's why aim at him. Customers Win10, others to cry on tishkovskim old client and wait for them to translate into the top ten. - Yadira96 commented on April 19th 20 at 12:52
@Yadira96, I would ottalkivaemsya from RB4011 if the budget doesn't allow something hap ac2, if allows - RB1100AHx4. - alexa.Bergnaum commented on April 19th 20 at 12:55
@alexa.Bergnaum, the budget allows CCR1009-7G-1C-1S+ - Yadira96 commented on April 19th 20 at 12:58
sstp on migrate depends on hardware support for aes. On models without it - indeed the pain and suffering. - christina_Bartell commented on April 19th 20 at 13:01
@Yadira96, what was the point of the question at all?) 70 such tunnels will load fine if 20 percent. - alexa.Bergnaum commented on April 19th 20 at 13:04
@alexa.Bergnaumthe Question just in case. not always what is on paper matches the reality, so I decided to play it safe. c CCR I have a little experience. - Yadira96 commented on April 19th 20 at 13:07
@Yadira96, the problem is that the ovpn and sstp in Mikrotik do not use aes-ni on the CPU, and respectively generate a higher load. - brandi_Dibber commented on April 19th 20 at 13:10
April 19th 20 at 12:18
I critics on the dev

Find more questions by tags MikrotikVPN