Exclude IPs for RRAS connection.

Question

Hello,
I have a server configured with RRAS for provide PPTP,SSTP connection to our clients, we have four public IPs added into server's NIC.
Problem is that, RRAS can connect through any IP of 4 which are added into server's NIC, it seems that RRAS occupied all 4 IPs, While I want to run another service on one of those IPs  and same port of SSTP, is there any way to exclude one IP from RRAS
occupy to make it available for different service?
Regards,
Jebran. 

Answer 1

Hi Jebran,
The Winsock application that is listening on the designated port was written so that it binds to any local IP address by using INADDR_ANY(i.e. 0.0.0.0 for IPv4 and [::] for IPv6). This means that the application will listen to all
local interfaces and we can connect to the port of any of them. This is by design. However, if we don’t want the Winsock application to listen to all local interfaces, it must be designed to bind to a specific IP address. By default SSTP based VPN connections
listens on all IP addresses of VPN server. Based on your description, we need SSTP VPN server to listen on specific IP address. We can change directly inside HTTP.SYS directly using “netsh http add iplisten” command.
In addition, the default port of SSTP used is 443, we can change this value to a different port using the registry value ‘ListenerPort’ at HKEY Local Machine\System\CurrentControlSet\Services\SstpSvc\Parameters to the desired value
if needed.
For more details, please refer to links below,
Setting up the SSTP listener and verifying it
http://blogs.technet.com/b/rrasblog/archive/2007/03/07/configuration-of-sstp-listener-and-verification.aspx
SSTP FAQ - Part 3: Server Specific
http://blogs.technet.com/b/rrasblog/archive/2007/01/25/sstp-faq-part-3-server-specific.aspx
Best Regards,
Tina