Page 1 of 1

No access from remote SSTP Vpn clients to server where SoftEther is installed and setup at Bridge mode ?

Posted: Thu Jul 24, 2025 3:50 pm
by cpservicespb
Here is SoftEther 4.44 build 9807 installed on Ubuntu 22.04 LTS x64 no GUI.

There are several NICs.
One of them is lan.

SoftEther is setup as SSTP Vpn server at L2 bridged mode.

All works, remote Vpn clients can access LAN resources except the server where SoftEther is installed.
Even ping to lan_IP of the server fails.

I triedt to setup SecureNAT with assigning IP range/DNS IP from LAN range.

But local resources on LAN are still accessible except server itself.

How is to setup SSTP Vpn to have access to all LAN resources including the server itself ?

Re: No access from remote SSTP Vpn clients to server where SoftEther is installed and setup at Bridge mode ?

Posted: Fri Jul 25, 2025 12:45 am
by solo
It has nothing to do with SSTP - "Bridge not working as expected"

Re: No access from remote SSTP Vpn clients to server where SoftEther is installed and setup at Bridge mode ?

Posted: Sat Nov 22, 2025 9:14 pm
by cpservicespb
There is to do something with SoftEther.

By the way L2tp/Ipsec or Ipsecv2 with helping of proxy-arp provides all access to LAN at L2.

Re: No access from remote SSTP Vpn clients to server where SoftEther is installed and setup at Bridge mode ?

Posted: Sun Nov 23, 2025 8:32 am
by cpservicespb
solo wrote:
Fri Jul 25, 2025 12:45 am
It has nothing to do with SSTP - "Bridge not working as expected"
I did it.
But there is no still access to the server where SoftEther is installed and launched.
Lab access exists.
I set up bridge to lan adapter from "Local Bridge Config" and set "DisableKernelModeSecureNAT" to true.

Re: No access from remote SSTP Vpn clients to server where SoftEther is installed and setup at Bridge mode ?

Posted: Sun Nov 23, 2025 11:43 am
by solo
cpservicespb wrote:
Sun Nov 23, 2025 8:32 am
I set up bridge to lan adapter from "Local Bridge Config" and set "DisableKernelModeSecureNAT" to true.
Incorrect, use either a double-bridge or SecureNAT. Both solutions are discussed in the above link.