Page 1 of 1

VPN inside a VPN? Will SoftEther VPN change openVPN ip address as well?

Posted: Mon May 30, 2022 2:59 pm
by elcangri
Hi all!

The scheme involves three PCs:
-Work-PC,
-Home-PC,
-CompanyX-PC;

SoftEther VPN Client is installed on Work-PC, a connection is established to Home-PC's SoftEther VPN Server.
When SoftEther VPN Client establishes this connection to Home-PC, it picks up home ip address. Will it then, openVPN Client, use this home ip address and "think" I am connecting from Home-PC to make the connection to CompanyX-PC? How do you check?

Thank you in advance!

Image

Re: VPN inside a VPN? Will SoftEther VPN change openVPN ip address as well?

Posted: Mon May 30, 2022 5:12 pm
by nobody12
Assuming HomePC is running windows OS pro, you could use workPC to establish an rdp session to homePC. Then you can use the openVPN client to talk to CompanyX-PC.
Of course there is software which is able to check if the connection from HomePC originates from a console session or from an rdp session, but this is a rather rare happening thing.

What will not work or will not work without hard work IMO (with openVPN client) is that workPC can use the openVPN client to connect to CompanX-PC

Re: VPN inside a VPN? Will SoftEther VPN change openVPN ip address as well?

Posted: Mon May 30, 2022 6:12 pm
by elcangri
Thanks for the answer, nobody12.
Assuming HomePC is running windows OS pro, you could use workPC to establish an rdp session to homePC. Then you can use the openVPN client to talk to CompanyX-PC.
Indeed, you are correct. I've been doing this for a long time, but the downside of this is that sometimes the lag is unbearable.
What will not work or will not work without hard work IMO (with openVPN client) is that workPC can use the openVPN client to connect to CompanX-PC
As of now WorkPC does connect to CompanyX's openVPN Server... but only when WorkPC is connected at home internet (due to location ip). What if one wants to go on vacation and still connect to CompanyX's openVPN? Then, connecting to a HomePC SoftEther VPN Server will mask the ip, thinking WorkPC is connected to home internet, but will openVPN also pick up this ip (from being connected to SoftEther's VPN Server- e.g. home internet) is the question?
In other words, when SoftEther VPN Client establishes a connection, it picks up new ip address, will then, openVPN Client use this new ip address to connect to openVPN Server?

Thanks!

Re: VPN inside a VPN? Will SoftEther VPN change openVPN ip address as well?

Posted: Mon May 30, 2022 11:50 pm
by solo
It works for me, in the following order:
  1. SE connect to a VPN Gate
  2. OpenVPN connect to my remote server
  3. check source IP traffic in WireShark or simpler LiveTcpUdpWatch
After SE connection to VPN Gate, default gateway is 10.245.254.254

Code: Select all

Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0   10.245.254.254  10.245.244.116       1
       10.245.0.0      255.255.0.0   10.245.244.116  10.245.244.116       1
   10.245.244.116  255.255.255.255        127.0.0.1       127.0.0.1       1
   10.255.255.255  255.255.255.255   10.245.244.116  10.245.244.116       1
        127.0.0.0        255.0.0.0        127.0.0.1       127.0.0.1       1
     130.158.6.60  255.255.255.255      192.168.8.1   192.168.8.101       20
      192.168.8.0    255.255.255.0    192.168.8.101   192.168.8.101       20
    192.168.8.101  255.255.255.255        127.0.0.1       127.0.0.1       20
    192.168.8.255  255.255.255.255    192.168.8.101   192.168.8.101       20
   219.100.37.193  255.255.255.255      192.168.8.1   192.168.8.101       1
        224.0.0.0        240.0.0.0   10.245.244.116  10.245.244.116       1
        224.0.0.0        240.0.0.0    192.168.8.101   192.168.8.101       20
Default Gateway:    10.245.254.254
and then my OpenVPN connection originates on the 10.245.0.0 VPN Gate subnet...
.
SE-OP.png

Re: VPN inside a VPN? Will SoftEther VPN change openVPN ip address as well?

Posted: Thu Jun 02, 2022 3:52 am
by elcangri
Great! So it is possible.
I'll have to download LiveTcpUdpWatch!
Thank you, solo!