option for remote access with ISP cr-nat

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
fjmolinabravo
Posts: 2
Joined: Wed Feb 22, 2023 10:20 pm

option for remote access with ISP cr-nat

Post by fjmolinabravo » Sat Feb 25, 2023 6:03 am

Hi

The ISP for local office network has cr-nat configured for internet output, therfore i can't do port-forwarding

What is the best configuration option to be able to connect to the local office network from my home?

I tried with ad-hoc configuration, but i can't connect to softether server (installed within the local office network)....maybe I need a proxy server that is accessible from the internet...I don't know, I'm confused..
Red local internet home
Softether server <- proxy-server <- pc

is correct?

Sorry for my english!! :(

thanks in advance

shakibamoshiri
Posts: 288
Joined: Wed Dec 28, 2022 9:10 pm

Re: option for remote access with ISP cr-nat

Post by shakibamoshiri » Sat Feb 25, 2023 6:19 am

fjmolinabravo wrote:
Sat Feb 25, 2023 6:03 am
Hi

The ISP for local office network has cr-nat configured for internet output, therfore i can't do port-forwarding

What is the best configuration option to be able to connect to the local office network from my home?

I tried with ad-hoc configuration, but i can't connect to softether server (installed within the local office network)....maybe I need a proxy server that is accessible from the internet...I don't know, I'm confused..
Red local internet home
Softether server <- proxy-server <- pc

is correct?

Sorry for my english!! :(

thanks in advance
for any reason if you cannot connect to a network from outside the solution is a "reverse tunnel"

if you cannot do this (from outside)
[ private network ] <===== [ you ]

usually you can reverse it bypassing FW , NAT, etc
[ private network ] =====> [ you ]

but since you (=your home PC, Phone, etc) does not have public IP address (= routable) you cannot implement directly and you need another server to help you

# solution 1, SE bridge + SE server
- setup a SE bridge in private network
- CC (cascade connection) it to another server which you have access to
- connect to SE server with public IP
[ private network (SE bridge)] == cc ==> [ SE server (public IP) ] <===== [ you ]

# solution 2. SE server x 2
- setup a SE server in private network
- CC (cascade connection) it to another server which you have access to
- connect to SE server with public IP
[ private network (SE server-1) ] == cc ==> [ SE server-2 (public IP) ] <===== [ you ]

fjmolinabravo
Posts: 2
Joined: Wed Feb 22, 2023 10:20 pm

Re: option for remote access with ISP cr-nat

Post by fjmolinabravo » Sat Feb 25, 2023 1:24 pm

Thanks for your answered....i try the option 1 until next friday....

Thanks....have a nice day!! :)

Post Reply