SoftEther VPN User Forum

Dear all,
here is my condition:

my router config
ip1(public ip): 202.175.3.3
ip2(public ip): 202.175.3.8
dhcp: 192.168.1.1 - 192.168.1.100
one-to-one nat mapping below:
internet map private(local)
202.175.3.8 192.168.1.2
already bind the internet exit

i can work in 192.168.1.2(windows server 2008) and confirmed the pc(192.168.1.2) internet exit ip is 202.175.3.8


after that i install SoftEther VPN on the windows server 2008(ip:192.168.1.2)

Local Bridge: disabled(not set anyting)
SecureNAT: enabled
Virtual NAT: enabled (default setting)
Virtual DHCP: enabled (default setting)

when my vpn client connet the vpn server. it can work.
but the vpn client got the internet exit ip is 202.175.3.3

and i want my vpn clients got the internet exit ip is 202.175.3.8 not 202.175.3.3 .

so i can i fixed it?

thanks!

I faced this condition on my local machine using SE server.
I have two modems, so two NICs
- 192.168.1.0/24
- 192.168.2./0/24

When I was starting the SE server, I noticed it picks up the one which has lower metric number (= higher priority) and if I turn off one interface, the other one is picked up. But you said your public IP for that server is 202.175.3.8 which is strange why the other one is selected.
Since there is no way to an bind IP address to SecureNAT. You may need to enable Local Bridge to statically source-nat to your desire IP address.
I do not have experience with Win Server and cannot give your extract steps, but others (on the forum have) and hope give you the exact one.

Re: can not bind the internet ip
Post by shakibamoshiri » Tue Mar 14, 2023 4:13 am

I faced this condition on my local machine using SE server.
I have two modems, so two NICs
- 192.168.1.0/24
- 192.168.2./0/24

When I was starting the SE server, I noticed it picks up the one which has lower metric number (= higher priority) and if I turn off one interface, the other one is picked up. But you said your public IP for that server is 202.175.3.8 which is strange why the other one is selected.
Since there is no way to an bind IP address to SecureNAT. You may need to enable Local Bridge to statically source-nat to your desire IP address.
I do not have experience with Win Server and cannot give your extract steps, but others (on the forum have) and hope give you the exact one.






HI shakibamoshiri, thanks for your replay.
in my opinion,in router
1.the dhcp service is by my router(like: 192.168.1.1 - 192.168.1.100), auto ip bind to ip1(public ip): 202.175.3.3
2.192.168.1.2 is bind to ip2(public ip): 202.175.3.8,
3.when my vpn client connect to the se(while i enable the Virtual DHCP on se), even though i already bind the internet exit，but the vpn client get the dhcp auto ip(like 192.168.1.1) is the same thing(dhcp auto ip got by the router dhcp service).

so maybe is my issue.

could you send the link or guide for "how to enable Local Bridge to statically source-nat to my desire IP address" pls? i will try!

anyone have a new idea? Thanks!

tgjustin01 wrote: ↑

Tue Mar 14, 2023 2:59 am

in my opinion,in router
1.the dhcp service is by my router(like: 192.168.1.1 - 192.168.1.100), auto ip bind to ip1(public ip): 202.175.3.3
2.192.168.1.2 is bind to ip2(public ip): 202.175.3.8,
3.when my vpn client connect to the se(while i enable the Virtual DHCP on se), even though i already bind the internet exit，but the vpn client get the dhcp auto ip(like 192.168.1.1) is the same thing(dhcp auto ip got by the router dhcp service).

so maybe is my issue.

Yes, this could be the main issue, why your OS DHCP assigns IP to SE vpn users :| can you try disabling you OS DHCP and test.
If you setup a separate DHCP server on your OS and disable SecureNAT DHCP -- then IPs from OS DHCP is advertised for vpn users , but you said SecureNAT has enabled ? right ? please double check

tgjustin01 wrote: ↑

Tue Mar 14, 2023 2:59 am

could you send the link or guide for "how to enable Local Bridge to statically source-nat to my desire IP address" pls? i will try!

Sure, read this post
https://www.vpnusers.com/viewtopic.php? ... 345#p98334