SoftEther VPN User Forum

Hi,
This is my first post here. Here is my setup, I have a network of 120.0.0.0/8 and I have an OpenWRT router running the SoftEther client. I am connected via SoftEther and, AccountList shows that my account is connected. But only one device gets an DHCP address. The other devices which are bridged (virtual Ethernet switch) to the LAN ports and WiFi of the routers are unable to get an IP. If I do set an IP, an internet connection is not detected on any of the devices. Does SoftEther have a limit on how many client is able to work on a single connection, any way to handle this?
Thanks,
Lee8219

Lee8219 wrote: ↑

Thu Jul 27, 2023 5:55 pm

I have a network of 120.0.0.0/8...
Does SoftEther have a limit on how many client is able to work on a single connection

That is a vast non-private network range. Are you sure you have it?

SoftEther has no limit, VPN Gate servers do have a single connection limit.

Hmm. The IP range should be okay, since I sit behind a NAT. I'm using VPN Azure. But that's not the point though... That is super weird. As the network only gives out one DHCP addresses one of the clients. So you need any logs or anything to sort this out?

That part of the internet is inaccessible to you.

No. If you attempt to force it...

A connection has been requested in Bridge / Router Mode. But the security policy for the connecting user forbids both bridge mode and router mode. (code 108)

Hmm, so I really can't implement it? Where I directly connect to my internal network with a SoftEther link, and access my machines that way? I really hope to avoid any NAT or anything, just grabbing an IP from my main server at 120.0.0.3, while all internet traffic goes through the default gateway of 120.0.0.1?

Wait, you're not trying to share VPN Gate, but connecting to your own server? If so, there is no problem whatsoever. You need a few modifications though, start with a private LAN network range as 120.x.x.x is too painful to even look at, then switch to SecureNAT if OpenWRT's DHCP is difficult.

Yep, I am trying to connect to my own server infrastructure, if I was not clear enough before. The thing is that using a Windows machine, I am able to establish an SSTP connection with no issue, now I am using the same user account with the SoftEther client on OpenWRT, It can establish a connection no problem but only one device connected to the "switch that is connected to the VPN interface" can get a DHCP and access the network. The rest are unable to.

For a test, on the server disable the bridge and enable SecureNAT with all defaults.

?

Sure. Will get back to you soon.

Hi, after enabling securenat and dhcp. The address is only offered to one device. The same issue also occurs.

Let's put aside OpenWRT for now. Can you establish connections from two Windows PCs?

Yes
With 2 seperate accounts.

So this is strictly only OpenWRT SE client issue. Do you intend to revise the Linux commands there?

Yep, I would think that maybe the client end has some issue, but it can connect successfully, just cant get DHCP traffic and run multiple devices

Hey all! I managed to get it working. By switching to using a VPN bridge instead of a client. And now it serves IPs from my range and it seems like it's doing well. Thanks.

Wow, I was about to post this suggestion...

Look, while it is doable with SE Client and Linux bridging, in your application context I'd probably use SE Bridge on OpenWRT instead. Something like https://www.softether.org/4-docs/2-howt ... Bridge_VPN with a few modifications of course.

I'm so glad I fixed it. Noting there's an issue with the OpenWRT softether package. Naming that localhost:443 is not binding to the service. So I had to use localhost:5555 instead. Just a heads up to those using a bridge. Also noting the fact I created a TAP adapter for the bridge adapter, then made another bridge interface in LuCI to bind it to the "non-management" port and the wireless. I have post notifications on, so I guess shoot a message or a reply if you guys need help of doing a similar setup. Thanks all for the help.
Lee8219