SoftEther VPN User Forum

Hi everyone!
I have a troubles with connection to my ddns vpn server and actually can't define the problem correct. So need help!

When i'm trying to connect to the local vpn server using ddns host address (vsa-moscow.softether.net) from the local network everything is ok. Server configuration tool and vpn client works pretty well. But when i'm trying to do the same from other network (i.e. using mobile internet connection or usign other ISP) doesn't happend. There is an error occurs saying there is network problem or wrong address or something like this. The same problem when i'm using open vpn on android phone no matter what ISP i'm using - the app resolving IP address and then waiting for connection for a long time with no result. In few words below:

Using home ISP from local network
- Server tool and VPN client are both connects to ddns host pretty well
- Open VPN from android or built-in android VPN connection doesn't work

Using other ISP (from friends or mobile internet)
- Server tool and VPN client can't reach the ddns host and doesn't work
- Open VPN and built-in VPN connection in android and IOS can't reach the server

So i'm absolutely have no idea what's wrong.
- ISP doesn't matters because i had tried several defferent ISPs
- Router configuration seems doesn't matters because everything is ok form local network using external links settings

Network info:
-Netgear ReadyNAS Server with VPN Server app installed v1.5.0 by Poussin
(doesn't have root access)
-vpn server configuration file is attached

Would be grateful for any advise!

Hi itrace,

You have enabled firewall on your router.
Please check it or open ports for VPN server: 443 tcp and 1194 udp

# nmap -PN -sS vsa-moscow.v4.softether.net

Starting Nmap 5.51 ( http://nmap.org ) at 2016-03-10 14:33 EST
Nmap scan report for vsa-moscow.v4.softether.net (92.243.167.40)
Host is up.
All 1000 scanned ports on vsa-moscow.v4.softether.net (92.243.167.40) are filtered

Nmap done: 1 IP address (1 host up) scanned in 206.88 seconds

UkrZilla wrote:
> You have enabled firewall on your router.
> Please check it or open ports for VPN server: 443 tcp and 1194 udp

Dear UkrZilla, thanks for reply!
Actually i did reset the router and check it. All ports are open, no filtering, firewall is off.
Unfortunatelly everything is still the same...

Is your NAS directly connected to Internet or you have router?
Your host is filtering traffic now.

UkrZilla wrote:
> Is your NAS directly connected to Internet or you have router?
> Your host is filtering traffic now.

NAS connected through the router. But everything is enabled in it.
I suspect ISP is filtering the traffic. Is it possible to check it somehow?
Just called to ISP support they say it's really possible and advise me to subscribe an option "external IP address"...

UkrZilla wrote:
> Is your NAS directly connected to Internet or you have router?
> Your host is filtering traffic now.

BTW vpnazure is working ok from everywhere and this could be the best solution but i need to have an access from smartphone aswell...

itrace wrote:
> UkrZilla wrote:
> > Is your NAS directly connected to Internet or you have router?
> > Your host is filtering traffic now.
>
> NAS connected through the router. But everything is enabled in it.
> I suspect ISP is filtering the traffic. Is it possible to check it somehow?
> Just called to ISP support they say it's really possible and advise me to subscribe
> an option "external IP address"...

Oh, you don't have an external IP. Please subscribe it.

itrace wrote:
> UkrZilla wrote:
> > Is your NAS directly connected to Internet or you have router?
> > Your host is filtering traffic now.
>
> BTW vpnazure is working ok from everywhere and this could be the best solution but i
> need to have an access from smartphone aswell...

It doesn't need an external IP since your server and clients connect to Azure, so it works.

UkrZilla wrote:
> itrace wrote:
> > BTW vpnazure is working ok from everywhere and this could be the best solution
> It doesn't need an external IP since your server and clients connect to Azure, so it
> works.

Right. It seems it's the only way to use it.
But i can't get one thing when i trying to connect from local network using ddns everything is ok. How it could be? ddns should resolve the same external ip as using other isp, isn't it? So what's the difference if i'm connecting from the local network or from the other side?

itrace wrote:
> UkrZilla wrote:
> > itrace wrote:
> > > BTW vpnazure is working ok from everywhere and this could be the best
> solution
> > It doesn't need an external IP since your server and clients connect to Azure,
> so it
> > works.
>
> Right. It seems it's the only way to use it.
> But i can't get one thing when i trying to connect from local network using ddns
> everything is ok. How it could be? ddns should resolve the same external ip as using
> other isp, isn't it? So what's the difference if i'm connecting from the local
> network or from the other side?

It is a good question.
In order to answer you need to do the following from another machine in your local net:
nslookup vsa-moscow.v4.softether.net
tracert -d vsa-moscow.v4.softether.net

Did you configure port forwarding settings?