Can't reach vpn server

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
itrace
Posts: 5
Joined: Thu Mar 10, 2016 5:33 pm

Can't reach vpn server

Post by itrace » Thu Mar 10, 2016 6:21 pm

Hi everyone!
I have a troubles with connection to my ddns vpn server and actually can't define the problem correct. So need help!

When i'm trying to connect to the local vpn server using ddns host address (vsa-moscow.softether.net) from the local network everything is ok. Server configuration tool and vpn client works pretty well. But when i'm trying to do the same from other network (i.e. using mobile internet connection or usign other ISP) doesn't happend. There is an error occurs saying there is network problem or wrong address or something like this. The same problem when i'm using open vpn on android phone no matter what ISP i'm using - the app resolving IP address and then waiting for connection for a long time with no result. In few words below:

Using home ISP from local network
- Server tool and VPN client are both connects to ddns host pretty well
- Open VPN from android or built-in android VPN connection doesn't work

Using other ISP (from friends or mobile internet)
- Server tool and VPN client can't reach the ddns host and doesn't work
- Open VPN and built-in VPN connection in android and IOS can't reach the server

So i'm absolutely have no idea what's wrong.
- ISP doesn't matters because i had tried several defferent ISPs
- Router configuration seems doesn't matters because everything is ok form local network using external links settings

Network info:
-Netgear ReadyNAS Server with VPN Server app installed v1.5.0 by Poussin
(doesn't have root access)
-vpn server configuration file is attached

Would be grateful for any advise!
You do not have the required permissions to view the files attached to this post.

UkrZilla
Posts: 65
Joined: Sun Dec 15, 2013 8:34 am

Re: Can't reach vpn server

Post by UkrZilla » Thu Mar 10, 2016 7:34 pm

Hi itrace,

You have enabled firewall on your router.
Please check it or open ports for VPN server: 443 tcp and 1194 udp

# nmap -PN -sS vsa-moscow.v4.softether.net

Starting Nmap 5.51 ( http://nmap.org ) at 2016-03-10 14:33 EST
Nmap scan report for vsa-moscow.v4.softether.net (92.243.167.40)
Host is up.
All 1000 scanned ports on vsa-moscow.v4.softether.net (92.243.167.40) are filtered

Nmap done: 1 IP address (1 host up) scanned in 206.88 seconds

itrace
Posts: 5
Joined: Thu Mar 10, 2016 5:33 pm

Re: Can't reach vpn server

Post by itrace » Thu Mar 10, 2016 8:03 pm

UkrZilla wrote:
> You have enabled firewall on your router.
> Please check it or open ports for VPN server: 443 tcp and 1194 udp

Dear UkrZilla, thanks for reply!
Actually i did reset the router and check it. All ports are open, no filtering, firewall is off.
Unfortunatelly everything is still the same...

UkrZilla
Posts: 65
Joined: Sun Dec 15, 2013 8:34 am

Re: Can't reach vpn server

Post by UkrZilla » Thu Mar 10, 2016 8:13 pm

Is your NAS directly connected to Internet or you have router?
Your host is filtering traffic now.

itrace
Posts: 5
Joined: Thu Mar 10, 2016 5:33 pm

Re: Can't reach vpn server

Post by itrace » Thu Mar 10, 2016 8:27 pm

UkrZilla wrote:
> Is your NAS directly connected to Internet or you have router?
> Your host is filtering traffic now.

NAS connected through the router. But everything is enabled in it.
I suspect ISP is filtering the traffic. Is it possible to check it somehow?
Just called to ISP support they say it's really possible and advise me to subscribe an option "external IP address"...

itrace
Posts: 5
Joined: Thu Mar 10, 2016 5:33 pm

Re: Can't reach vpn server

Post by itrace » Thu Mar 10, 2016 8:31 pm

UkrZilla wrote:
> Is your NAS directly connected to Internet or you have router?
> Your host is filtering traffic now.

BTW vpnazure is working ok from everywhere and this could be the best solution but i need to have an access from smartphone aswell...

UkrZilla
Posts: 65
Joined: Sun Dec 15, 2013 8:34 am

Re: Can't reach vpn server

Post by UkrZilla » Thu Mar 10, 2016 8:38 pm

itrace wrote:
> UkrZilla wrote:
> > Is your NAS directly connected to Internet or you have router?
> > Your host is filtering traffic now.
>
> NAS connected through the router. But everything is enabled in it.
> I suspect ISP is filtering the traffic. Is it possible to check it somehow?
> Just called to ISP support they say it's really possible and advise me to subscribe
> an option "external IP address"...

Oh, you don't have an external IP. Please subscribe it.

UkrZilla
Posts: 65
Joined: Sun Dec 15, 2013 8:34 am

Re: Can't reach vpn server

Post by UkrZilla » Thu Mar 10, 2016 8:39 pm

itrace wrote:
> UkrZilla wrote:
> > Is your NAS directly connected to Internet or you have router?
> > Your host is filtering traffic now.
>
> BTW vpnazure is working ok from everywhere and this could be the best solution but i
> need to have an access from smartphone aswell...

It doesn't need an external IP since your server and clients connect to Azure, so it works.

itrace
Posts: 5
Joined: Thu Mar 10, 2016 5:33 pm

Re: Can't reach vpn server

Post by itrace » Thu Mar 10, 2016 8:45 pm

UkrZilla wrote:
> itrace wrote:
> > BTW vpnazure is working ok from everywhere and this could be the best solution
> It doesn't need an external IP since your server and clients connect to Azure, so it
> works.

Right. It seems it's the only way to use it.
But i can't get one thing when i trying to connect from local network using ddns everything is ok. How it could be? ddns should resolve the same external ip as using other isp, isn't it? So what's the difference if i'm connecting from the local network or from the other side?

UkrZilla
Posts: 65
Joined: Sun Dec 15, 2013 8:34 am

Re: Can't reach vpn server

Post by UkrZilla » Thu Mar 10, 2016 8:51 pm

itrace wrote:
> UkrZilla wrote:
> > itrace wrote:
> > > BTW vpnazure is working ok from everywhere and this could be the best
> solution
> > It doesn't need an external IP since your server and clients connect to Azure,
> so it
> > works.
>
> Right. It seems it's the only way to use it.
> But i can't get one thing when i trying to connect from local network using ddns
> everything is ok. How it could be? ddns should resolve the same external ip as using
> other isp, isn't it? So what's the difference if i'm connecting from the local
> network or from the other side?

It is a good question.
In order to answer you need to do the following from another machine in your local net:
nslookup vsa-moscow.v4.softether.net
tracert -d vsa-moscow.v4.softether.net

thisjun
Posts: 2458
Joined: Mon Feb 24, 2014 11:03 am

Re: Can't reach vpn server

Post by thisjun » Fri Apr 01, 2016 7:32 am

Did you configure port forwarding settings?

Post Reply