Page 1 of 1

can not ping VPN server (ARP seems to fail)?

Posted: Sun Mar 02, 2025 5:01 pm
by Vmcsnekke
I have a linux softEther VPN server and client configured in "Remote Access to LAN" mode.
Everything is working fine, client can connect and becomes part of the "server LAN" (which is defined by the server-localBridge that is connected to the real/physical LAN via the one-and-only-server NIC, namely: "eth0").

Let's say I'm using 192.168.200.x/24 as IPv4 LAN subnet address.
The client and ping to pretty much any system in the "server LAN" (192.168.200.x) except for the server itself (that of course also has a 192.168.200.x address).
It looks like the server stops responding to ARP requests... is this because it listens on promiscuous mode (and so It'll never work)?
or did I make a (configuration) error?

Any help will be appreciated, thanks!

Re: can not ping VPN server (ARP seems to fail)?

Posted: Sun Mar 02, 2025 10:31 pm
by solo
Bridge not working as expected

If we had a Linux sub-forum this would be the top sticky topic.

Re: can not ping VPN server (ARP seems to fail)?

Posted: Tue Mar 04, 2025 8:31 pm
by Vmcsnekke
Thanks for your answer.

My softEther VPN server only acts as VPN server. So, this restriction is not a big deal.

Nonetheless I tested whether setting DisableKernelModeSecureNAT to 'true' (in /var/lib/softether/vpn_server.config) makes it work.
It doesn't. This must be because I'm not using SecureNAT feature?

Is there any other option to make this work (besides using a 2nd NIC)?

Actually, what bugs me the most is the fact I do not understand the issue. Is there some better explanation somewhere?

Re: can not ping VPN server (ARP seems to fail)?

Posted: Tue Mar 04, 2025 10:14 pm
by solo
solo wrote:
Thu Aug 31, 2023 1:13 pm
That's one solution and you still could use a USB NIC, but there is another one, search for "soft tap" and do double-bridge.