SoftEther VPN User Forum

My network configuration is as follows:
Client --(wifi)------>Android HotSpot ---(internet)---> Router ----(LAN)---> Server

***** Client:
PC + Windows 7 with SoftEther Client 4.20, VPN Client Adapter
IP. Y.Y.Y.Y
IP assigned after connection: 192.168.1.102

***** Router:
external IP X.X.X.X
port 443 is forwarded to Server.
local IP: 192.168.1.1
LAN: 192.168.1.1/24

***** Server:
PC + Linux(x64)
local IP: 192.168.1.100 (eth0)
runs SoftEther VPN 4.20

***** VPN configuration:
local bridge from Virtual Hub to eth0 on server

********** Problem: **********
I can connect from Client to Server without problems. Also, Router Web Client (192.168.1.1:80) is accessible,
which is not accessible from Internet (X.X.X.X:80). But I cannot connect to any other port on LAN, like:
192.168.1.100:22, 192.168.1.100:8080, 192.168.1.200:80 etc.
Attached you'll find "route print" for the client.

What am I missing?

What are you exactly trying to access ?, PCs, DVRs, IP camers, ?

Well first, I'm trying to connect to ssh server , listening on 192.168.1.100:22.
It's the same machine VPN server runs on.

192.168.1.100:22 is accessible from other PC's in the LAN.

Let's simplify the problem.

1) SoftEther server runs on local LAN PC (linux). This machine has a single network adapter, eth0, with IP 192.168.1.100. A local bridge from Virtual Hub to eth0 is configured.

2) 192.168.1.1 is a router, with DHCP server.

Problem:
When I connect (from outside LAN) to SoftEther server, I get an address from DHCP, and I can connect/ping all PC's on LAN, EXCEPT 192.168.1.100. I cannot telnet on any port on it, it does not even respond to ping.

Is this normal behavior ? Do i Need a TAP device instead, to do a local bridge and be able to reach 192.168.1.100 ??

You can't access the IP address of the ethernet card that is bridged to your internal network through the VPN connection. It's a Linux-specific limitation. you can do it with a windows-based machine. A simple solution is to "SSH or telnet to your local router, or any SSH-capable machine" and then from there "SSH or telnet back to the SE server".


Good luck (:.

Thanks!

I read in the manual, that you can do a local bridge to a TAP device.
Is it a solution to overcome this linux limitation ?

I solved the problem by installing and using second Network Adapter on the linux server.
Thanks!