VPN Routing over Secure NAT
Posted: Tue Mar 10, 2020 8:57 am
Hello,
we as an IT service provider have possibly found a bug in the Softether VPN program.
First of all our situation:
Our client has one VPN server as a virtual maschine. The interfaces in that server are one interface in the internal network and four configured bridges for four different VPN-Hubs. Right now, we currently only have one hub in operation. We configured a few Users, who can connect to the Hub. They get an IP-address from an external DHCP-server (not the one in the SecureNAT options).
Our problem:
Our problem is seemingly a routing-problem, because a few accessible webpages cannot be reached or are extremly slow. We checked all routing tables of all servers. The routing to the VPN-network is correct.
Our solution:
If we enable SecureNAT on the Hub and deactivate it directly afterwards, everything is instantly reachable and the VPN-Connections are working just fine. I assume that it should not be so.
If anyone has an idea, please enlighten me.
Greetings from Germany
we as an IT service provider have possibly found a bug in the Softether VPN program.
First of all our situation:
Our client has one VPN server as a virtual maschine. The interfaces in that server are one interface in the internal network and four configured bridges for four different VPN-Hubs. Right now, we currently only have one hub in operation. We configured a few Users, who can connect to the Hub. They get an IP-address from an external DHCP-server (not the one in the SecureNAT options).
Our problem:
Our problem is seemingly a routing-problem, because a few accessible webpages cannot be reached or are extremly slow. We checked all routing tables of all servers. The routing to the VPN-network is correct.
Our solution:
If we enable SecureNAT on the Hub and deactivate it directly afterwards, everything is instantly reachable and the VPN-Connections are working just fine. I assume that it should not be so.
If anyone has an idea, please enlighten me.
Greetings from Germany