Tap and bridge basic configuration

[ironworks]

Hello everybody,

I'm trying to setup a basic Softether configuration. I have to admit I never used nor configured a VPN server. So concepts like tap bridges and local bridges are difficul to understand for me despite all topics and documentations i read.

I created a Virtualbox lab. On my FreeBSD, run both a firewall and the Softether VPN Server.
WAN : interface em0 192.168.0.25/24
LAN : interface em1 192.168.1.1/24

From a client located in my WAN, i can ping the virtual interface (by default 192.168.30.1) of my virtual hub but not my em1 interface. I didn't create locate bridge through Softether manager nor freeBSD. My interfaces are not in promiscuous.

I know i forgot something but i don't really understand how it works. Can you help me ? Thanks :)

[mlsjwr]

Hi,
If you want to make a site-to-site connection, just read our discussion.
http://forum.softether.org/viewtopic.php?f=7&t=5505

It realy works! Great software, with great administration GUI.

It took me some time but it sucessfully works now.
if You set it like in the description L3 routing or L2 bridge and You set everything like the description
That should work. If not, than the problem will be in Your router, or firewall, something is not opened,
or vpn cant passthrough.

I did not find a setup for tap, but Raafat helped me a lot, and with his assistance I could set up the tap also.

Just read the topic,

have a nice day
Richard

[ironworks]

Hello Richard,

I do not want to make a site-to-site connection but a remote to LAN one.

But i saved your link for a future use.

[mlsjwr]

The theory with tap device should be the same.
I also had a problem with setting the tap device,
Sometimes i caused loop, sometimes I lost connection,
Sometimes i did not get IP address from dhcp so

Basically You have to create tap device in SoftEther, cerate a linux bridge,
add tap device and your eth0 or em1 or whatever you have to the linux bridge port
set IP for linux bridge, and flush the tap and eth0 settings

And if You do not want to set it all the time, You can set it in /etc/network/interfaces file,
or create a script what does the settings for You,

the sudo shutdown -r 30 is a very useful command what can save your life if you are remote.

I hope this helps
Richard

[thisjun]

SoftEther VPN server of FreeBSD version is only for site-to-site connection.