SoftEther VPN User Forum

Hi
I installed SoftEther vpn in my nas DNS-325 and works very well, c'is only one problem, I can remotely enter my nas home, I see all my devices in my home network (ip webcam, ip router, etc. ...) but I can not access my IP of the DNS-325 in which I installed SoftEther vpn.
Can anyone help me?
Thanks Thanks a lot

VPN clients cannot access any server IP address that is bound to a bridged physical interface. This is why the SoftEther documentation recommends having a dedicated physical interface in the SoftEther server for L2 bridging.

Can you please explain in detail the L2 bridging portion? Im having a hard way to figure it myself :/

dajhorn wrote:
> VPN clients cannot access any server IP address that is bound to a bridged
> physical interface. This is why the SoftEther documentation recommends
> having a dedicated physical interface in the SoftEther server for L2
> bridging.

The nas DNS-325 is a PC where there is installed:
- Webserver ip 192.168.20.1;
- Vpnserver softether ip 192.168.20.1:443.
Maybe the problem is the same ip or I miss some settings.
Please have the opportunity to remotely access the Webserver?

Thank you very much

texas_72 wrote:
> dajhorn wrote:
> > VPN clients cannot access any server IP address that is bound to a bridged
> > physical interface. This is why the SoftEther documentation recommends
> > having a dedicated physical interface in the SoftEther server for L2
> > bridging.
>
> The nas DNS-325 is a PC where there is installed:
> - Webserver ip 192.168.20.1;
> - Vpnserver softether ip 192.168.20.1:443.
> Maybe the problem is the same ip or I miss some settings.
> Please have the opportunity to remotely access the Webserver?
>
> Thank you very much

Someone is found with the same problem?
Thanks

Read a manual.
http://www.softether.org/4-docs/1-manua ... r_Mac_OS_X

thisjun wrote:
> Read a manual.
>
> http://www.softether.org/4-docs/1-manua ... r_Mac_OS_X

I beg to differ.

This is my solution to access my private NAT IP on my dlink DNS-320L
Do the followings:
Create a new Virtual Hub, Create as many users as you wish.
Under "Manage Virtual Hub", click on "Virtual NAT and Virtual DHCP Server(Secure NAT)", Click "Enable SecureNAT"
Check the "SecureNAT Configuration", you will notice the default Distributes IP Address is 192.168.30.10, default gateway 192.168.30. 1 (This is fine).
You may exit from here.

Next, ***********very very important**********
Do Not create "Local Bridge" for this Virtual Hub............

All done. It works well for me.
Upon logging into virtual hub, my assigned ip was 192.168.30.10. I managed to access my private NAT IP at 192.168.2.34 and view every other network folder.

mmmmx wrote:
> thisjun wrote:
> > Read a manual.
> >
> >
> http://www.softether.org/4-docs/1-manua ... r_Mac_OS_X
>
> I beg to differ.
>
> This is my solution to access my private NAT IP on my dlink DNS-320L
> Do the followings:
> Create a new Virtual Hub, Create as many users as you wish.
> Under "Manage Virtual Hub", click on "Virtual NAT and Virtual DHCP
> Server(Secure NAT)", Click "Enable SecureNAT"
> Check the "SecureNAT Configuration", you will notice the default
> Distributes IP Address is 192.168.30.10, default gateway 192.168.30. 1 (This is
> fine).
> You may exit from here.
>
> Next, ***********very very important**********
> Do Not create "Local Bridge" for this Virtual Hub............
>
> All done. It works well for me.
> Upon logging into virtual hub, my assigned ip was 192.168.30.10. I managed to access
> my private NAT IP at 192.168.2.34 and view every other network folder.

I try as soon as possible.
Many thanks

Please disable kernel mode SecureNAT.
http://www.vpnusers.com/viewtopic.php?f ... enat#p8108

Hi
Ok works by disabling kernel.
I still have a problem with Softether server,

With Softether server started:
http: //192.x.x.x/zm/ -> not found
http://192.xxx/serviio/console/ -> not found
http://192.xxx:9091/transmission/web/ -> FOUND

With Softether server stopped
http: //192.x.x.x/zm/ -> FOUND
http: //192.x.x.x/serviio/console/ -> FOUND
http://192.xxx:9091/transmission/web/ -> FOUND

any ideas?

thanks

texas_72 wrote:

> With Softether server started:
> http: //192.x.x.x/zm/ -> not found
> http://192.xxx/serviio/console/ -> not found

> any ideas?
>
> thanks


First: "Hiding" IPs from the private range (like 192.168.0.0/16, 10.0.0.0/8 or 172.16.0.0/12) is not helping and unnecessary.
So "we" must guess. Are "zm", "serviio" and transmission on the same machine? And they are on the NAS/VPN-Server or is it a different machine? Sure, we can "assume" you mean its all on the same...but say it directly is much better, if you want help.

And you are sure, that "zm" and "console" are http-Links and not httpS? Because, by default, softether listen
on Port 443, the https-Port.

My personal "best" solution for remote acces is, bridge Softether to tap-device and then bridge the tap-device to eth0.
With this, you can:
- use your local nameserver and dhcp servcer for vpn-clients too
- no "route" config needed
- you can reach vpn-server through vpn
- LLMNR/mDNS will work too (and all other protocolls, which is compatible with Ethernet, not only IP)

qupfer wrote:
> texas_72 wrote:
>
> > With Softether server started:
> > http: //192.x.x.x/zm/ -> not found
> > http://192.xxx/serviio/console/ -> not found
>
> > any ideas?
> >
> > thanks
>
>
> First: "Hiding" IPs from the private range (like 192.168.0.0/16, 10.0.0.0/8
> or 172.16.0.0/12) is not helping and unnecessary.
> So "we" must guess. Are "zm", "serviio" and
> transmission on the same machine? And they are on the NAS/VPN-Server or is it a
> different machine? Sure, we can "assume" you mean its all on the same...but
> say it directly is much better, if you want help.
>
> And you are sure, that "zm" and "console" are http-Links and not
> httpS? Because, by default, softether listen
> on Port 443, the https-Port.
>
> My personal "best" solution for remote acces is, bridge Softether to
> tap-device and then bridge the tap-device to eth0.
> With this, you can:
> - use your local nameserver and dhcp servcer for vpn-clients too
> - no "route" config needed
> - you can reach vpn-server through vpn
> - LLMNR/mDNS will work too (and all other protocolls, which is compatible with
> Ethernet, not only IP)

I know I forgot to point out a few things:

With Softether server started:
http: //192.xxx/zm/ -> 500 - Internal Server Error
http://192.xxx/serviio/console/ -> 500 - Internal Server Error
http://192.xxx:9091/transmission/web/ -> FOUND
problem both remotely and also within my wifi network.

With Softether server stopped
http: //192.x.x.x/zm/ -> FOUND
http: //192.x.x.x/serviio/console/ -> FOUND
http://192.xxx:9091/transmission/web/ -> FOUND
Logically only within my wifi network..

I think the differences that you notice is that it works the address using a port other than 80, in fact, work address with port 9091.

I think it not VPN problem.

texas_72 wrote:
> Hi
> Ok works by disabling kernel.
> I still have a problem with Softether server,
>
> With Softether server started:
> http: //192.x.x.x/zm/ -> not found
> http://192.xxx/serviio/console/ -> not found
> http://192.xxx:9091/transmission/web/ -> FOUND
>
> With Softether server stopped
> http: //192.x.x.x/zm/ -> FOUND
> http: //192.x.x.x/serviio/console/ -> FOUND
> http://192.xxx:9091/transmission/web/ -> FOUND
>
> any ideas?
>
> thanks
Hi Texas_72,

I have not monitored this channel for quite some time.


I have highlighted this issue at Dlink forum before,

I rephrase herein
---------
"There is another issue with DLINK DNS-320L. It is cheap and a single CPU machine that does little multi-taskings.
I have similar problems before. Whenever I log into virtual HUB under SecureNAT while co-workers at my office carry out large files transfers thru DNS-320L. DNS-320L would freezes up. (Sometimes, it waited long duration before web interface refreshes)
To verify this, goto DNS-320L, Management, System status, Resource Monitor, you will notice CPU's utilisation shoots up to 100%.

To overcome this problem, try 1 dedicated unit of NAS for softether, another NAS for files storage, install zoneminder, Serviio, phpmyadmin at another NAS."
--------------
I am happy ever since. Hope this helps