SoftEther VPN User Forum

Is it possible to use local bridge + dhcp server (such as dnsmasq) to assign a public IP to users on login?

I'm able to get this set up and login, but from there I cannot get out to the internet.

In that usage, you do not have to assign private IP addresses to VPN clients.

Instead, set up a DHCP server for private IP addresses, and set up an IP masq (NAT or NAPT) server to aggregate all private IP addresses to a single global IP address, as the exit IP address.

Hi Dnobori -

Thanks for replying.

That's actually how I'm doing it now with LAN IPs and a single public IP.

What my original request is asking is how to assign a different public IP (what you're calling an exit IP) to each user as they log in.

For example, if I have a pool of public facing ips, x.x.x.2 - x.x.x.32 - and I want each user to have their own public/exit IP when they log in.

Is this possible with SoftEther?

Yes, it is possible. However, the DHCP server is not useless to assign each IP address to each user.

To realize static public IP address assignment for each user, each VPN Client's virtual network adapter must have a static IP in the configuration of client computer.

You can define the access list to enforce each VPN user to use only a specified IP address as fixed.