problem enabling IPSec for Softether VPN server on Linux

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
ratin3
Posts: 9
Joined: Mon Feb 24, 2020 5:14 am

problem enabling IPSec for Softether VPN server on Linux

Post by ratin3 » Mon Feb 24, 2020 5:27 am

Hi there, I configured the server on a linux box using vpncmd, added a user user1 with password that belong to a group called group1 which I added. I cant create a hub for some reason (says : Error occurred. (Error code: 52)
Not enough privileges.)
I then tried to enable IPSec anyway, using IPSecEnable command, L2TP: yes, Raw L2Tp : no, EtherIP: no, Pre Shared Key: test123, default virtual hub: DEFAULT
It gives me the same error. Note that I am on the VPN Server/DEFAULT prompt. I tried to create another hub with a name like hub1, same issue. Consequently i cant enable ipsec. How to resolve? What sort of privilege do I need? I ran the vpncmd from the root account.

Also on the Mac, I configured the vpn client as:

configuration: linux
server adress: <ip>
Account name: user1@hub1 (assuming I get thru the hub creation at some point)
Auth Settings:
User Authentication:
Password: the user pass that I specified during user creation
Shared Secret: test123
Group Name: group1

Does this all look right?

Thanks for any help.

ratin3
Posts: 9
Joined: Mon Feb 24, 2020 5:14 am

Re: problem enabling IPSec for Softether VPN server on Linux

Post by ratin3 » Mon Feb 24, 2020 5:39 am

Update:
by specifying the real IP address when launching vpncmd, I got thru the issue of creating the hub, now I have the user created under hub1 and enabled ipsec for hub1 as well. But no luck when i try connecting from macOSx. When I try to connect it says:
A connection could not be established to the PPP server. Try reconnecting. If the problem continues, verify your settings and contact your system administrator.

Server log:
2020-02-23 21:57:11.515 The connection "CID-2" (IP address: xxx.xxx.xxx.xxx, Host name: blah.blah.net, Port number: 1701, Client name: "L2TP VPN Client", Version: 4.32, Build: 9731) is attempting to connect to the Virtual Hub. The auth type provided is "External server authentication" and the user name is "user1".
2020-02-23 21:57:11.515 Connection "CID-2": Successfully authenticated as user "user1".
2020-02-23 21:57:11.515 Connection "CID-2": The new session "SID-XXXX-[L2TP]-2" has been created. (IP address: xxx.xxx.xxx.xxx, Port number: 1701, Physical underlying protocol: "Legacy VPN - L2TP")
2020-02-23 21:57:11.515 Session "SID-XXXX-[L2TP]-2": The parameter has been set. Max number of TCP connections: 1, Use of encryption: Yes, Use of compression: No, Use of Half duplex communication: No, Timeout: 20 seconds.
2020-02-23 21:57:11.515 Session "SID-XXXX-[L2TP]-2": VPN Client details: (Client product name: "L2TP VPN Client", Client version: 432, Client build number: 9731, Server product name: "SoftEther VPN Server (64 bit)", Server version: 432, Server build number: 9731, Client OS name: "L2TP VPN Client", Client OS version: "-", Client product ID: "-", Client host name: "blah.blah.net", Client IP address: "xxx.xxx.xxx.xxx", Client port number: 1701, Server host name: "xxx.xxx.xxx.xxx", Server IP address: "xxx.xxx.xxx.xxx", Server port number: 1701, Proxy host name: "", Proxy IP address: "0.0.0.0", Proxy port number: 0, Virtual Hub name: "hub1", Client unique ID: "BLAHBLAHBLAH")
2020-02-23 21:57:18.344 Session "SID-XXXX-[L2TP]-2": The session has been terminated. The statistical information is as follows: Total outgoing data size: 0 bytes, Total incoming data size: 1388 bytes.

Looks like its timing out after 20 sec.

By the way, I love the simplicity of this product, everything is made so easy and intuitive! A++ for the developers

ratin3
Posts: 9
Joined: Mon Feb 24, 2020 5:14 am

Re: problem enabling IPSec for Softether VPN server on Linux

Post by ratin3 » Mon Feb 24, 2020 6:20 am

Update: After some poking around, I realized that the server and the client are on the same network. Enabled SecureNat and the problem was solved.

Post Reply