Page 1 of 1

SoftEther on Ubuntu 12.10 x64

Posted: Sat Mar 16, 2013 2:13 pm
by Batnun
Hi,

I'm trying to install SoftEther on Ubuntu.

I'm getting the following errors:

make[1]: Entering directory `/root/vpnserver'
Preparing SoftEther VPN Server...
ranlib lib/libcharset.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libcrypto.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libedit.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libiconv.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libintelaes.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libncurses.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libssl.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib lib/libz.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
ranlib code/vpnserver.a
make[1]: ranlib: Command not found
make[1]: [i_read_and_agree_the_license_agreement] Error 127 (ignored)
gcc code/vpnserver.a -O2 -fsigned-char -pthread -m64 -lm -ldl -lrt -lpthread -L./ lib/libssl.a lib/libcrypto.a lib/libiconv.a lib/libcharset.a lib/libedit.a lib/libncurses.a lib/libz.a lib/libintelaes.a -o vpnserver
make[1]: gcc: Command not found
make[1]: *** [i_read_and_agree_the_license_agreement] Error 127
make[1]: Leaving directory `/root/vpnserver'

I guess I'm missing some packages?...

Do you have a list of all the packages I need to add to a standard Ubuntu 12.10 x64 installation?

Thanks!

Re: SoftEther on Ubuntu 12.10 x64

Posted: Sat Mar 16, 2013 11:59 pm
by calimansi
This is just a shot in the dark, but it looks like you don't have gcc installed.

Re: SoftEther on Ubuntu 12.10 x64

Posted: Sun Mar 17, 2013 3:38 am
by cedar
You need gcc and binutils to build SoftEther VPN.
You may find these in your distribution.

Re: SoftEther on Ubuntu 12.10 x64

Posted: Sun Mar 17, 2013 5:01 am
by Batnun
Problem already solved :)

If you have standard installation of Ubuntu 12.10 x64, you just need to add the 'make' and the 'libssl-dev' packages.

So, from the CLI:

apt-get install make libssl-dev

I've installed the SoftEther VPN Server on Ubuntu 12.10 x64, running on VMware ESXi 5.1, and the SoftEther VPN Server Manager on Windows 7 x64. I've managed to connect from the Server Manager to the VPN Server successfully.

Now, more questions: :)

I'm trying to install a simple VNP server, where clients connect from remote location, and get access to the local network.

Do I need two virtual network interfaces on the virtual machine, or one is enough? In other words, can I use a single network interface for both management/VPN and the Virtual Hub?

Also, I've manage to connect from the Apple iPhone internal LT2P VPN client from the local network, but not from outside. Seems like I need to open more ports on my router. According to the server logs, it looks like the client is connecting using port 500, then 4500 and 1701. Do you have a list of all the ports that I need to open from outside?

And last question - how can I push additional routes to the client, in order to route few more networks through the VPN connection?

Btw, the Server Management software look amazing, very polished. Well done! I want to move to SoftEther server from the OpenVPN platform, and SoftEther already looks like much better and mature product!

Thanks in advance!

Re: SoftEther on Ubuntu 12.10 x64

Posted: Sun Mar 17, 2013 12:55 pm
by cedar
You can use a single interface for VPN service and local-bridge.

L2TP/IPsec protocol uses UDP/500 and UDP/4500 port.
(Apple iPhone also tries to connect UDP/1701, but I think it may be a bug.)

Re: SoftEther on Ubuntu 12.10 x64

Posted: Mon Mar 18, 2013 8:53 am
by Batnun
UDP/1701 is part of the IPsec negotiation of the L2TP protocol.

So, everything seems working now, but when the client connects, he gets a new default gateway, and all his network traffic now goes through the VPN. How do I inject only the routes I want to the client, with no default gateway? I really don't want employees to browse the internet using the VPN connection...

We have similar configuration on the OpenVPN server - we inject only few specific routes to the client.

Please advise.

Thanks!