SoftEther VPN User Forum

Hello,

I am tring to use Local Bridge on AWS. And I follow the document create two Network Interface on my EC2 instance, and config the VPN Server use it.
But when I connect to the AWS virtual hub from my client, the client can't ping any server on the same EC2 subnet, even the IP that VPN Server used. Should I enable SecureNAT/DHCP on VPN virtual Hub? Please advise, thanks.

EC2 region:
VPNServer 10.0.0.7
Server1~100 10.0.0.100~200 (I don't have install VPN client on it)

The client want to talk to the servers by VPN, thanks.

Are you using VPC or something else?

kh_tsang wrote:
> Are you using VPC or something else?

Yes, I using VPC.

I think you should check the configurations or ask AWS support first about their configurations.

Some switches prevents MAC/IP spoofing but I have no idea about VPC.

kh_tsang wrote:
> I think you should check the configurations or ask AWS support first about
> their configurations.
>
> Some switches prevents MAC/IP spoofing but I have no idea about VPC.

Just confirmed that AWS IP spoofing outbound from EC2 instances is blocked.
ARP and DNS spoofing inbound is blocked.

What is the Softether Local Bridge really need? Outbound ?
Do we have alternative way for this case if the EC2 Instances don't have SoftetherVPN client on it? Thanks.

Use tap device and do NAT with your OS.