/interface/sstp-client
当前显示英文原文，切换到「中文」可查看译文。
sstp-client
RouterOS directory reference for /interface/sstp-client.
interface/sstp-client
Type: Directory
| Flag | Name | Description |
|---|---|---|
X | disabled | Whether an item is disabled. |
R | running | Whether the interface is running. |
H | hw-crypto | Whether hardware encryption is active. |
| Argument | Type | Description |
|---|---|---|
name | string | Descriptive name of the interface. |
max-mtu | num | Maximum Transmission Unit. |
max-mru | num | Maximum Receive Unit. |
mrru | num | Maximum packet size that can be received on the link. If a packet is bigger than tunnel MTU, it is split into multiple packets, allowing full-size IP or Ethernet packets to be sent over the tunnel. |
connect-to * | address (flags=D46v) | Remote address of the SSTP server. |
port | num | Port to connect to. |
http-proxy | alt { address: ipAddr , ipv6-address: ip6Addr , name: string } | Proxy address. |
proxy-port | num | Proxy port. |
certificate | enum (none) { none:0 } | Client certificate from the certificate store. |
verify-server-certificate | bool | Verifies the server certificate against the router's certificate store. |
verify-server-address-from-certificate | bool | Verifies the server address from the certificate. |
user * | string | User name used for authentication. |
password | string | Password used for authentication. |
profile | enum | Specifies which PPP profile configuration is used when establishing the tunnel. |
keepalive-timeout | enum (disabled) { disabled:0 } | Keepalive timeout in seconds. |
add-default-route | bool | Whether to add the SSTP remote address as a default route. |
default-route-distance | num | Distance value applied to the auto-created default route when add-default-route is enabled. |
dial-on-demand | bool | Connects only when outbound traffic is generated. If enabled, a route with a gateway address from 10.112.112.0/24 network is added while the connection is not established. |
authentication | ubit (pap, chap, mschap1, mschap2) | Allowed authentication methods. By default all methods are allowed. |
pfs | enum (no | yes | required) { no:0, yes:1, required:2 } | Specifies which TLS authentication to use. yes - TLS uses ECDHE-RSA and DHE-RSA. required - uses only ECDHE. |
tls-version | enum (any | only-1.2) { any:0, only-1.2:2 } | Specifies which TLS version to allow. |
ciphers | ubit (aes256-sha, aes256-gcm-sha384) | Allowed ciphers. |
add-sni | bool | Adds TLS SNI extension to client hello packets. Available from RouterOS version 7.15. |