SoftEther VPN User Forum

Hello,

I have been reading the forums for past week and I been trying to figure out how to use the multiple IPs for outbound routing for clients when they disconnect and log in back in. However, it seems I cannot figure out how to make it work, since I thought the Clustering would be ideal since it would load-balance the connections and I can configure the IPTables to route each VirtualHub to go out on each IP assigned by TAP.

But considering when using Clustering, it does not support the EtherIP, L2TP and such, which is a major bummer. So I trying to see if how to implement something that Softether can use multiple IPs for outbound connections. However, I rather that it be single inbound IP and routed out on different IPs to make it simple to give out single IP to users and it shows the outbound IP as one of the multiple IPs during the session.

So if I have 128 IPs bound to the server, how can I use the Softether to use those for outbound IPs among them for use? Anyone have any ideas or such on implementing this?

What OS are you using?
If you use linux, you can realize these steps.
1. Create 128 virtual hubs.
2. Create 128 taps for localbridge to each hub.
3. Create 128 NAT for each tap.
maybe...

namery wrote:
> any suggestion??? i tried hub bridge to ethX(each with one public ip) and
> it doesnt work

Dont bridge to ethx. Create TAP and bridge it to hub.

This kind of configuration has to be done on networking and not through Softether server.

Configure a DHCP server and then set your routing device to route a certain subnet of the private IP addresses to masquerade through this public IP address.

Example:

You have 192.168.1.0/24 for DHCP pooling and you have 102.132.53.27/29 for public IP addresses.

Set 192.168.1.0/27 to masquerade to 102.132.53.28.
Set 192.168.1.32/27 to masquerade to 102.132.53.29
Set 192.168.1.64/27 to masquerade to 102.132.53.30
Set 192.168.1.96/27 to masquerade to 102.132.53.31
Set 192.168.1.128/27 to masquerade to 102.132.53.32

Why NAT if not neccessary? Just use arp proxy. Of course assuming you would NAT 1-to-1 and not many-to-1.

This is exactly what I do. Bridge HUB to tap, set up arp proxy to ethx and tapx, set route of the public range to tapx, set dhcp to distribute public range.