External Server Authentication Failure in SoftEther

[binubk]

I have a new Softether Installation running on windows 2012 R2 with all latest patches. System is configured with English US Language and Keyboard layout. This system is joined to a Windows 2012 Active Directory domain. The user installing the software is an enterprise administrator who is also a local administrator on the box

While creating a user in Softether, I am getting the following error. Any pointers to troubleshoot this issue is greatly appreciated

The Certificate Authentication function and the External Server
Authentication function have not been implemented on the
open-source version of SoftEther VPN yet. Choose either Anonymous
Authentication or Password Authentication instead.

Following is already tried
1. Uninstalled Softether
2. Removed and Added the computer back to the domain
3. Logged in with different Administrator ( Domain) accounts and installed Softether
4. Made sure there is no firewalls between DC and the Machine
5. Importing Softether configuration from a working machine

None of the above worked... Thanks in advance for any help

[binubk]

Any pointers? Thoughts? Ideas are welcome

[cedar]

Please try password auth.

[binubk]

cedar wrote:
> Please try password auth.

Hello cedar

I the password auth is working. But i am behind the External server Authentication ( AD). Any help you can provide would be Awesome

Regards
Binu B K

[binubk]

Good News!!

I managed to fix this issue... Its seems like soft ether does not like some IPs ( public IPs ) in Asia Pacific. Eventhough my IP was from Australia, the External Auth and NAT was blocked

To resolve this disable DDNS (Dynamic DNS Function)

To disable the Dynamic DNS Function, modify the configuration file of VPN Server.

The "declare root" directive has the "declare DDnsClient" directive. In this directive, you can switch "bool Disable" from false to true, and reboot the VPN Server, then the Dynamic DNS Function will be disabled.

Regards
Binu B K

[binubk]

Does any one know why Softether restricting some public IPs so that they can't use the full functionality?

[cedar]

http://ja.softether.org/3-spec/cureent_limitations

[vpnusers]

Good News!!

I managed to fix this issue... Its seems like soft ether does not like some IPs ( public IPs ) in Asia Pacific. Eventhough my IP was from Australia, the External Auth and NAT was blocked

To resolve this disable DDNS (Dynamic DNS Function)

To disable the Dynamic DNS Function, modify the configuration file of VPN Server.

The "declare root" directive has the "declare DDnsClient" directive. In this directive, you can switch "bool Disable" from false to true, and reboot the VPN Server, then the Dynamic DNS Function will be disabled.

Regards
Binu B K

Can we safely delete the 9 lines of code having to do with the DDNS?