Connecting to an SSTP VPN server from Windows 10
You can use an SSTP (Secure Socket Tunnel Protocol) tunnel to connect to the local network of the Keenetic router remotely. This method is convenient because user data is sent as HTTPS traffic, and in the latest versions of Windows operating systems, no additional programmes are required for connection.
An SSTP server configuration is shown in detail in the SSTP VPN server article.
Below is a step-by-step procedure for connecting to an SSTP server from a remote computer running Windows 10.
To connect to an SSTP server, you need to add a VPN connection to the Windows computer. To do this, go to the 'Windows Settings' menu and open the 'Network & Internet' section.
![sstp-win-01-en.png](../../../../assets/images/uuid-a28a8b8f-ae03-ebb3-7388-19583116b6d7.png)
Then go to the VPN settings.
![sstp-win-02-en.png](../../../../assets/images/uuid-2e082e79-8a9b-541b-a2f4-5efa308fee87.png)
Click on 'Add a VPN connection'.
![sstp-win-03-en.png](../../../../assets/images/uuid-2fcd88d3-d66b-910d-f2d1-3cdfdd9902c5.png)
In the window that opens, you must enter the following settings:
![sstp-win-04-en.png](../../../../assets/images/uuid-5c82030a-640b-e9f8-ad26-c3aa7972a7e4.png)
VPN provider > Windows (built-in)
Connection name > any custom name for identifying the tunnel, e.g. '
Home segment
'.Server name or address > domain name registered for the router at KeenDNS.
VPN type > SSTP protocol
Type of sign-in info > Username and password
In the Username and Password fields, you can specify your router account details so that you do not have to enter them every time you connect and click the 'Save' button.
To prevent your computer from using a tunnel to access the Internet, but only to connect to the router's local network, you will need to configure the VPN connection settings further. Go to the 'Change adapter options' menu, which is available under 'Change your network settings' (via the 'Network & Internet > Status' view).
![sstp-win-05-en.png](../../../../assets/images/uuid-cc522f89-6bd1-217b-b3c5-6f11bbaa7506.png)
After clicking on 'Change adapter options', the 'Network Connections' window will appear. In the context menu of the network adapter (available by right-clicking) that matches the tunnel connection, select 'Properties'.
![sstp-win-06-en.png](../../../../assets/images/uuid-456fabee-e111-e62d-75fa-14d4d5d5b9de.png)
The tunnel property setting window opens. On the 'Networking' tab, select the 'Internet Protocol Version 4 (TCP/IPv4)' component and click on the 'Properties' button.
![sstp-win-07-en.png](../../../../assets/images/uuid-efa3b92e-696b-13a5-a6d6-7f345f41dc2a.png)
In the TCP/IPv4 property setting window, click the 'Advanced...' button.
![sstp-win-08-en.png](../../../../assets/images/uuid-86bc51be-009c-3673-aa52-961f9aac7aca.png)
On the 'IP Settings' tab, in the Advanced TCP/IPv4 Settings window, you must disable the setting 'Use default gateway on remote network'. To apply the setting, close this window and the additional windows that caused it to open using the 'OK' button.
![sstp-win-09-en.png](../../../../assets/images/uuid-c1ccaecb-366e-6a35-14c6-0cd4cd7ecb11.png)
The configured connection is displayed in 'Network & Internet > VPN' or in the 'Network' menu in the system notification area (at the bottom right of the screen).
![sstp-win-10-en.png](../../../../assets/images/uuid-b231438e-34f8-ce80-88ca-c77f08941807.png)
![sstp-win-11-en.png](../../../../assets/images/uuid-fdb1a4a8-c6d0-6f68-dfca-9ee53288a53c.png)
![sstp-win-12-en.png](../../../../assets/images/uuid-abf65425-58a0-f5fb-8ad3-eb340e78c91e.png)
When the tunnel is established, you can access the resources of your Keenetic local network on your computer.
For example, by typing in the Explorer address bar '\\192.168.1.1
' (IP address of the router on the local network), you can access a connected USB drive.
![sstp-win-13-en.png](../../../../assets/images/uuid-4d93550f-f7ae-addd-bc6b-647e91f9b89e.png)
Підказка
Occasionally, in some versions of Windows 10, when you create a new SSTP VPN connection, the MS-CHAPv2
authentication protocol is not activated by default for some reason and you may see a message when you connect: 'The remote connection was denied because the user name and password combination you provided is not recognized, or the selected authentication protocol is not permitted on the remote access server'.
![sstp-win-14-en.png](../../../../assets/images/uuid-8228e961-d2ad-baf4-53d4-25d9a5b7bedf.png)
In this case, in the properties of the SSTP connection, enable the use of 'Microsoft CHAP Version 2 (MS-CHAP v2)' and save the setting.
![sstp-win-15-en.png](../../../../assets/images/uuid-1926aea6-5931-e49a-4577-91e918b72535.png)
![sstp-win-16-en.png](../../../../assets/images/uuid-6ea59af0-ba4e-1c5a-20ea-976a7c5b1bb2.png)
Then check the server connection.