Cannot access LAN through VPN with local bridge

[Hegemon]

My network configuration is as follows:
Client --(wifi)------>Android HotSpot ---(internet)---> Router ----(LAN)---> Server

***** Client:
PC + Windows 7 with SoftEther Client 4.20, VPN Client Adapter
IP. Y.Y.Y.Y
IP assigned after connection: 192.168.1.102

***** Router:
external IP X.X.X.X
port 443 is forwarded to Server.
local IP: 192.168.1.1
LAN: 192.168.1.1/24

***** Server:
PC + Linux(x64)
local IP: 192.168.1.100 (eth0)
runs SoftEther VPN 4.20

***** VPN configuration:
local bridge from Virtual Hub to eth0 on server

********** Problem: **********
I can connect from Client to Server without problems. Also, Router Web Client (192.168.1.1:80) is accessible,
which is not accessible from Internet (X.X.X.X:80). But I cannot connect to any other port on LAN, like:
192.168.1.100:22, 192.168.1.100:8080, 192.168.1.200:80 etc.
Attached you'll find "route print" for the client.

What am I missing?

[raafat]

What are you exactly trying to access ?, PCs, DVRs, IP camers, ?

[Hegemon]

Well first, I'm trying to connect to ssh server , listening on 192.168.1.100:22.
It's the same machine VPN server runs on.

192.168.1.100:22 is accessible from other PC's in the LAN.

[Hegemon]

Let's simplify the problem.

1) SoftEther server runs on local LAN PC (linux). This machine has a single network adapter, eth0, with IP 192.168.1.100. A local bridge from Virtual Hub to eth0 is configured.

2) 192.168.1.1 is a router, with DHCP server.

Problem:
When I connect (from outside LAN) to SoftEther server, I get an address from DHCP, and I can connect/ping all PC's on LAN, EXCEPT 192.168.1.100. I cannot telnet on any port on it, it does not even respond to ping.

Is this normal behavior ? Do i Need a TAP device instead, to do a local bridge and be able to reach 192.168.1.100 ??

[raafat]

You can't access the IP address of the ethernet card that is bridged to your internal network through the VPN connection. It's a Linux-specific limitation. you can do it with a windows-based machine. A simple solution is to "SSH or telnet to your local router, or any SSH-capable machine" and then from there "SSH or telnet back to the SE server".


Good luck (:.

[Hegemon]

Thanks!

I read in the manual, that you can do a local bridge to a TAP device.
Is it a solution to overcome this linux limitation ?

[Hegemon]

I solved the problem by installing and using second Network Adapter on the linux server.
Thanks!