Page 1 of 1

a few questions

Posted: Tue Jul 15, 2014 2:43 pm
by pkpowell
I have connected our office (a) with a subsidiary (b), and also my home (c) with softether - (b) and (c) connect to (a). These cascade connections work perfectly.

At the moment client connections only work to (c).
I've forwarded udp ports 500, 4500 and 1701 on (b) and (c) to the local vpnserver, but the OSX VPN never makes it past the connecting phase on (b). (a is behind an asa 5505 where i still have to figure out how to port-forward!)
Does anybody know what I've missed?

Another problem is that if a machine connects via dhcp at home (c), it receives an ip address from (a). I remedied that by giving myself fixed ips for each subnet.
Is there a way to let dhcp hand out local ips? Would the layer 3 switch help in this case?

Thanks for your help
cheers
Phil

Re: a few questions

Posted: Thu Jul 31, 2014 7:04 am
by thisjun
The router which doesn't support VPN pass-through can't handle multiple IPsec connection.

Please use Security Policy to filter DHCP packets. https://www.softether.org/4-docs/1-manu ... y_Policies

Re: a few questions

Posted: Fri Aug 01, 2014 11:57 am
by pkpowell
Thanks. Filtering DHCP packets does the job perfectly.

Any idea why I can connect to a machine on a different subnet via fqdn e.g. "ssh phil@admin.local" but not via its ip-address ssh phil@192.168.45.67? I also cannot ping ip addresses.

Phil

Re: a few questions

Posted: Wed Aug 20, 2014 7:32 am
by thisjun
If you do ping to the fqdn, which does IP respond?