SecureNAT vs ISP MAC control

AntonK · Post by **AntonK** » Fri Jun 26, 2015 3:50 pm

Hi. I have SecureNAT enabled to use Softether for internet access through VPN. ISP which server uses controls MAC adress, server itself connects to internet just fine but any VPN client gets redirected by ISP as device with unknown MAC and does not gives access to internet.
Can`t figure out where is the problem,

kh_tsang · Post by **kh_tsang** » Mon Jun 29, 2015 1:52 am

I don't think it is anything about MAC control because routers replace the MAC address with their own when doing routing.

Post by **thisjun** » Thu Jul 09, 2015 6:15 am

Please disable Kernel-mode SecureNAT.

AntonK · Post by **AntonK** » Thu Jul 30, 2015 11:42 pm

thisjun wrote:
> Please disable Kernel-mode SecureNAT.

Thanks, not it works, sort of...

Both links are 100mbs but speed drops to 0,5mbs and latencies are cosmic. It becomes unusable.

Have any directions?

kh_tsang · Post by **kh_tsang** » Thu Jul 30, 2015 11:53 pm

Try to add a tap device and do nat with linux routing and iptables instead of SecureNAT.

AntonK · Post by **AntonK** » Thu Jul 30, 2015 11:59 pm

kh_tsang wrote:
> Try to add a tap device and do nat with linux routing and iptables instead
> of SecureNAT.
My softether runs on windows xp as some small db application server and i am trying to make it vpn server

kh_tsang · Post by **kh_tsang** » Fri Jul 31, 2015 1:02 am

Disable SecureNAT. Install Softether VPN Client. Add a virtual adapter. Connect to itself with no adjustment of routing tables in the advanced settings on system startup and configure internet sharing in your WAN adapter and select the virtual adapter as the adapter for LAN.

AntonK · Post by **AntonK** » Fri Jul 31, 2015 1:40 am

kh_tsang wrote:
> Disable SecureNAT. Install Softether VPN Client. Add a virtual adapter.
> Connect to itself with no adjustment of routing tables in the advanced
> settings on system startup and configure internet sharing in your WAN
> adapter and select the virtual adapter as the adapter for LAN.

This sounds like clutches. Neither of my clients will be windows machine. Just tested it on ipfire routed and with lg d802. Same result painfuly slow unusable internet access.

kh_tsang · Post by **kh_tsang** » Fri Jul 31, 2015 1:54 am

I mean installing the vpn client on the vpn server.

AntonK · Post by **AntonK** » Fri Jul 31, 2015 2:26 am

kh_tsang wrote:
> I mean installing the vpn client on the vpn server.

And what difference can it possibly make?

kh_tsang · Post by **kh_tsang** » Fri Jul 31, 2015 3:05 am

Possible improvement of the performance.

SecureNAT vs ISP MAC control

SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control

Re: SecureNAT vs ISP MAC control