Page 1 of 1

SoftEther 1:1 NAT to branch offices overlapping ip's

Posted: Fri Jan 15, 2016 11:00 am
by engineer69
Following scenario I'm able to get working with OpenVPN. But for the various reasons I would like to get it also working with SoftEtherVPN. Could you help me with configuration to get routing working.

[attachment=0]Softether_scenario.jpg[/attachment]

I should be able to connect for each device in branch offices from the application server by using 10.10.x.x IP addresses. In routers I have set iptables rules to enable 1:1 NAT.

iptables -t nat -D PREROUTING -d '10.10.10.0/24' -i tun0 -j NETMAP --to '192.168.1.0/24'
iptables -t nat -I PREROUTING -d '10.10.10.0/24' -i tun0 -j NETMAP --to '192.168.1.0/24'
iptables -t nat -D POSTROUTING -s '192.168.1.0/24' -o tun0 -j NETMAP --to '10.10.10.0/24'
iptables -t nat -I POSTROUTING -s '192.168.1.0/24' -o tun0 -j NETMAP --to '10.10.10.0/24'

But how I should set routing and interfaces on SoftEther server to get it working?

I have tried to add push route 10.10.10.0/255.255.255.0/192.168.30.10 to the VirtualNAT, but without success. Also tried to add same routing rule to the L3 switch routing table where VirtualHUB belongs to.

Additionally I have road warrior which uses 192.168.30.x address. This should also be able to connect branch offices, but I have same problem. In practice, I can't get 10.10.x.x addressing working over tunnels.

Re: SoftEther 1:1 NAT to branch offices overlapping ip's

Posted: Thu Jan 28, 2016 7:36 am
by thisjun
Please try to use tap mode localbridge.

Re: SoftEther 1:1 NAT to branch offices overlapping ip's

Posted: Tue Feb 02, 2016 8:01 am
by engineer69
Do you mean that I should bridge VPN connections and then do routing on the server OS instead of SoftEther?
Maybe short example would help me most.

Re: SoftEther 1:1 NAT to branch offices overlapping ip's

Posted: Tue Feb 16, 2016 7:37 am
by thisjun