27. Configuring SSTP VPN with Self Signed Certificate on Windows Server 2019

Video Series on Advance Networking with Windows Server 2019:
This video tutorial will cover the steps on how to configure an SSTP VPN with self-signed certificate in Windows 2019.
Follow my blogs:
msftwebcast.bl...

[@CloudSecurity360]

This video is 3 yrs old and still fixing issues. Thanks

[@rajughimire5406]

Thank you for the great video, I saw several videos on the same topic but no other is as simple as yours.

[@norelmilihov2941]

great video . i just got one question . is the cliet has to be connected to a network for this to work?

[@Farisse007]

Great ! First time something works on youtube ! I'm glad it work great work !

[@Jellman86]

Your videos are great, i really appreciate them! Please keep them coming! +subbed

[@ugandharnrs1650]

Super...Thanks it worked ...We should use only CN name not the IP...

[@mrtau6279]

Should this work from a different location? that is different Network different internet connection? or should I change VPN Server name (ip address) to external ip? could you demonstrate how to do this plz.

[@JaiJoseph-zj5bv]

I'm getting an error saying 'no such host is known' when trying to connect to the VPN. Is there any way to solve this? I'm guessing it's related to DNS.

[@flstudio3222]

Can you solve it?

[@Martin-ot7xj]

Hi there, how to convert ip address to the hostname of the VPN server ??? for example i want to install a VPN server but i don't want to give the VPN server ip address to the clients i want to give them a dynamic hostname instead of ip address. how can I do that? ??thnx

[@jurajvantuch9636]

Can I have one question? SSTP is using port 443, how it works when the VPN server is inside LAN? How can I say to border router where to send traffic to this VPN server? Is it enought to forward port 443 to our VPN server? Can I use private(self-signed) certificate? Thats all? Thank you for your videos, you are great?

[@MSFTWebCast]

Yes, you have to configure port forwarding on your border router (for TCP port number 443). You can configure SSTP with self-signed certificate but you have to export the self-signed certificate from VPN server. As well as you need to import that certificate on vpn client computer.

[@Jellman86]

@@MSFTWebCast Would this work? I would imagine that if you tried to access the VPN from the internet side you would get "CN name does not match passed value" error. Would it be better to generate a lets encrypt cert and pass that to rras.

[@undergod1987]

@@Jellman86 i simply did this by editing the host file on the client system

[@ahmedsaad-lk2og]

thanks

[@karolk8663]

SSTP VPN is driving me crazy. I'm getting error "CN name does not match passed value" Do you know why though?

[@Jellman86]

you have used the IP address of the server rather than the CN which would be yourservername.yourdomain.local

[@karolk8663]

@@Jellman86 I've figured it out. I've used ip address of the server, external ip address and ****.yourdomain.local.

[@mrtau6279]

@@karolk8663 Did you connect from a remote location (different internet connection)? How exactly did you configure this on your client?

[@jurajvantuch9636]

@@karolk8663 can you write more details? Did you use private or public IP addres in certificate? Connection must be via public that i understand,but im not sure with certificate. Thanks.

[@undergod1987]

@@jurajvantuch9636 in order to do this remotely you will probably need to edit your host file to point the CNAME "server.name.local" to point to your Servers network Public IP address. if you have a dynamic ip then this will not work for you.

[@KerByGaming971]

Doesn’t work have an issue with my certificates !

[@undergod1987]

the certificate issue is the fact that it had to be self signed. it uses the Servers local domain name "Server.Name.local" not a public Registered domain name.

[@mdmanik-xy7ui]

💜💜