SoftEther VPN User Forum

Hi

The ISP for local office network has cr-nat configured for internet output, therfore i can't do port-forwarding

What is the best configuration option to be able to connect to the local office network from my home?

I tried with ad-hoc configuration, but i can't connect to softether server (installed within the local office network)....maybe I need a proxy server that is accessible from the internet...I don't know, I'm confused..
Red local internet home
Softether server <- proxy-server <- pc

is correct?

Sorry for my english!! :(

thanks in advance

fjmolinabravo wrote: ↑

Sat Feb 25, 2023 6:03 am

Hi

The ISP for local office network has cr-nat configured for internet output, therfore i can't do port-forwarding

What is the best configuration option to be able to connect to the local office network from my home?

I tried with ad-hoc configuration, but i can't connect to softether server (installed within the local office network)....maybe I need a proxy server that is accessible from the internet...I don't know, I'm confused..
Red local internet home
Softether server <- proxy-server <- pc

is correct?

Sorry for my english!! :(

thanks in advance

for any reason if you cannot connect to a network from outside the solution is a "reverse tunnel"

if you cannot do this (from outside)
[ private network ] <===== [ you ]

usually you can reverse it bypassing FW , NAT, etc
[ private network ] =====> [ you ]

but since you (=your home PC, Phone, etc) does not have public IP address (= routable) you cannot implement directly and you need another server to help you

# solution 1, SE bridge + SE server
- setup a SE bridge in private network
- CC (cascade connection) it to another server which you have access to
- connect to SE server with public IP
[ private network (SE bridge)] == cc ==> [ SE server (public IP) ] <===== [ you ]

# solution 2. SE server x 2
- setup a SE server in private network
- CC (cascade connection) it to another server which you have access to
- connect to SE server with public IP
[ private network (SE server-1) ] == cc ==> [ SE server-2 (public IP) ] <===== [ you ]

Thanks for your answered....i try the option 1 until next friday....

Thanks....have a nice day!! :)