Page 1 of 1
					
				SSL-VPN
				Posted: Tue Jan 31, 2017 8:27 pm
				by items
				I installed softether vpn server on my home computer and forwarded port 443 from the router to the computer.
the client on my computer works great when I'm outside home connecting via softether vpn client.
when I'm at the office I cannot connect back home.
browser doesn't use proxy and I can go to https sites without any problems but softether vpn doesn't connect.
Any ideas?
How can I troubleshoot this?
			 
			
					
				Re: SSL-VPN
				Posted: Wed Feb 15, 2017 7:54 am
				by thisjun
				What error code did you get?
Did you check the server log?
			 
			
					
				Re: SSL-VPN
				Posted: Wed Feb 22, 2017 3:56 am
				by items
				the client cannot connect.
The server was never reached by the client.
			 
			
					
				Re: SSL-VPN
				Posted: Thu Feb 23, 2017 7:48 pm
				by moatazelmasry
				Just to avoid any misunderstanding:
You setup SE on a PC at home. Then forwarded port 443 on the router to this PC
When you are outside, using another PC/Laptop, you can connect to your home server
Only when you are at the office, you can not connect to your SE server? So this problem is only related to connections coming out of the work network??
			 
			
					
				Re: SSL-VPN
				Posted: Thu Feb 23, 2017 10:35 pm
				by items
				Correct.
only from the office I cannot connect
			 
			
					
				Re: SSL-VPN
				Posted: Thu Feb 23, 2017 11:58 pm
				by moatazelmasry
				I can only imagine that this problem is related somehow to the firewall.
Could you try the following:
nc -z -v [HOME_IP] 443
It could be that your work is monitoring HTTPS connections. I know of some practices where companies/countries allow https communication to big sites like ebay,facebook etc.., but slow/disable https for unknown sites
			 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 12:15 am
				by items
				What do you mean by nc ?
			 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 6:36 am
				by fenice
				items wrote:
> What do you mean by nc ?
It's a linux command. :) If it's not installed on your distribution then install it with your package manager.
			 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 8:36 am
				by moatazelmasry
				as fenice said, it is a linux command
could be installed via package name "netcat"
This is like telnet but for sending UDP packets and it would show whether you can reach port 443 on your machine via UDP
			 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 10:17 am
				by items
				OK, I will install a linux VM on my laptop and try it when I get back to the office next week, I will update.
Just to clarify, I'm using windows to windows connection.
my softether is windows, my laptop is windows.
Thanks
			 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 12:06 pm
				by moatazelmasry
				There are netcat similar tools for windows, just a quick google search:
https://eternallybored.org/misc/netcat/ 
			
					
				Re: SSL-VPN
				Posted: Fri Feb 24, 2017 12:28 pm
				by items
				symantec AV just flagged both nc anc nc64 as security risk and quarantined them.
I had a linux VM so I will use that one
			 
			
					
				Re: SSL-VPN
				Posted: Sun Feb 26, 2017 4:24 pm
				by dust_at_SE
				I have same problem. And i install VPN gate on my office PC try to figure out the problem and get some idea. the interesting thing is, some server from VPN gate i can connect some can't. And while i enable Azure function on my VPN server, i can connect to my VPN server via Azure hostname,(xxxx.vpnazure.net). anyone have other idea to understand what happen on my office firewall or my VPN server setting problem?(Sorry about my pool english :-) )
			 
			
					
				Re: SSL-VPN
				Posted: Mon Feb 27, 2017 1:43 pm
				by items
				I gave it a try from windows vm box and from linux vm box on my laptop from the office, both succeeded
D:\netcat-win32-1.12>nc -z -v xxx.xxx.xxx.xxx 443
[xxx.xxx.xxx.xxx] 443 (https) open
Still I cannot connect using softether vpn client using the same computer I ran the nc test from
			 
			
					
				Re: SSL-VPN
				Posted: Wed Mar 08, 2017 12:10 am
				by items
				I was able to figure out what is wrong.
out company is using proxy which is not part of the browser.
I added the proxy to softether and it is working.
How do I disable the default gateway from the client?
I want to have one profile with default gateway and one without.
			 
			
					
				Re: SSL-VPN
				Posted: Thu Mar 09, 2017 1:53 am
				by items
				I figured it out
I had to create to virtual hubs, each one with different configuration.
			 
			
					
				Re: SSL-VPN
				Posted: Thu Mar 09, 2017 10:05 am
				by dust_at_SE
				items wrote:
> I figured it out
> I had to create to virtual hubs, each one with different configuration.
I still no idea what happened. Now i am using vpnazure. Can you share your experience? I try many different config but still can't find out. (create proxy, put the server on DMZ, create cluster server... etc.)
			 
			
					
				Re: SSL-VPN
				Posted: Thu Mar 09, 2017 11:48 am
				by items
				my configuration id different
I use a router with DD-WRT installed, I enabled softether vpn and it was easy to configure the vpn through windows client connected.
The challenge was create to profiles that one will work with default gateway and  the other without