Hi guys!
I am trying to setup a Site to Site (Lan to Lan) IPSec Vpn and I already read these 2 documents but they talk just about overall concepts of L2 and L3 Lan to Lan VPNs, I am struggling to find a documentation about 'how to'.
https://www.softether.org/4-docs/1-manu ... L2_Bridge)
and
https://www.softether.org/4-docs/1-manu ... P_Routing)
Also, does SoftEther support Virtual Routing and Forwarding (VRF), SourceNAT and DestinationNAT, to solve the issue when you have to configure to VPN tunnels with 2 different Sites that have the same private IP Range.
Thanks for any help and feedback
SoftEther - Site To Site (Lan to Lan) IPSec VPN
-
- Posts: 1
- Joined: Tue Dec 07, 2021 10:16 am
-
- Posts: 26
- Joined: Tue Jan 18, 2022 9:47 am
- Contact:
Re: SoftEther - Site To Site (Lan to Lan) IPSec VPN
"I am trying to setup a Site to Site (Lan to Lan) IPSec Vpn and I already read these 2 documents but they talk just about overall concepts of L2 and L3 Lan to Lan VPNs, I am struggling to find a documentation about 'how to'."
SoftEther does not support traditional IPsec Site-to-Site connections. This is another protocol. SE uses SSL and need bridge software at each site, while IPsec S2S is normaly a Gateway-to-Gateway connection. Therefore you will not find suiteable howtos for this.
"Also, does SoftEther support Virtual Routing and Forwarding (VRF), SourceNAT and DestinationNAT, to solve the issue when you have to configure to VPN tunnels with 2 different Sites that have the same private IP Range."
Had the same thought, need more time to figure out, maybe not.
SoftEther does not support traditional IPsec Site-to-Site connections. This is another protocol. SE uses SSL and need bridge software at each site, while IPsec S2S is normaly a Gateway-to-Gateway connection. Therefore you will not find suiteable howtos for this.
"Also, does SoftEther support Virtual Routing and Forwarding (VRF), SourceNAT and DestinationNAT, to solve the issue when you have to configure to VPN tunnels with 2 different Sites that have the same private IP Range."
Had the same thought, need more time to figure out, maybe not.