Error 720

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Error 720

Post by KevCar » Thu Aug 22, 2013 1:12 am

I have installed the VPN on a Centos 6.4 box with 2 nics. One nic is on the local lan with a dedicated IP. The other is in promiscuous mode and no ip. To do that I ran ifconfig eth1 promisc. I then ran ifconfig eth1 0.0.0.0. I believe that is how you configure it? So eth1 is attached to the local hub and plugged into the network. I am nat'ing 443 to the static ip. I am also trying to use Windows SSTP. Cert is configured and working. I can connect but after the login it tries to register on the network and after a while I get an error 720. I have tried different configs. I was using only one nic and that to did not work. But if I enable Secure NAT with dhcp the vpn wold connect but I was unable to ping the network. I also tried disabling the hub while using the secure nat. Same thing. Could connect but no lan. I would receive the dhcp address of 192.168.30.x but could not ping the internal network. Not sure where to go from here.

EDIt: I removed the local bridge and enabled secure nat. I can connect but I can not ping the network. I can ping the 192.168.30.1

Edit: Disabled secure nat. Local Bridge setup to eth1. Added static IP to sstp client. Connected. Looks like error 720 means no ip address. Still can't ping the lan though. What gives?

Edit: OK, it seems to be a problem on my local bridge. When teh hub is confgured for eth1, the one thats in promisc mode, it shows offline. Although his software is fantastic, there really needs to be a walk through which includes using the second adapter. The direction are great up to that point. I am not even fully sure if it can operate on a single nic that is being nat'ed. I just read that its best ot use a second nic.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Thu Aug 22, 2013 4:05 pm

Port 443 is already used by the Softether VPN Protocol. Try altering listening port for Softether VPN Client.

KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Re: Error 720

Post by KevCar » Fri Aug 23, 2013 9:08 pm

I am not using the Client. Just using microsoft sstp. Switching to Secure Nat connects but unable to get to the the lan network. I think the port settings are fine.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sat Aug 24, 2013 1:42 am

Thank you. I just get it working correctly with sharing the same port.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sat Aug 24, 2013 1:43 am

Is the DHCP on the server itself for the local LAN network(real ethernet)?

KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Re: Error 720

Post by KevCar » Sat Aug 24, 2013 4:12 am

The DHCP is on the local Lan. When not using the Secure Nat I get the 720 error. This happens because I do not receive an ip address from the local dhcp server. If I give myself an IP, like 192.168.30.11, I connect. But can't talk to the local lan.
Can you describe you server config? Thanks for replying.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sat Aug 24, 2013 7:56 am

Which server hosts the DHCP, the VPN Server itself or external DHCP Server like routers?
You do not have the required permissions to view the files attached to this post.

KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Re: Error 720

Post by KevCar » Sat Aug 24, 2013 7:50 pm

My Server is connected to a wireless router that connects to another wireless router. The DHCP server is on that second wireless router which is also doing the NAT.
I take it your server has a single NIC?
Thanks for the help.

KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Re: Error 720

Post by KevCar » Sat Aug 24, 2013 9:04 pm

I think I am getting somewhere. I thought the client that connects should receive an IP address outside of the local Lan. I gave the client a local Lan address and it connected and I am now able to ping the internal lan. So I guess the big question is why the DHCP requests of the client not getting an IP from my DHCP Server?

KevCar
Posts: 9
Joined: Wed Aug 21, 2013 2:46 am

Re: Error 720

Post by KevCar » Sat Aug 24, 2013 9:11 pm

For fun I installed the dhcp server on the VPN server to see if it would make a difference. Client still does not receive an IP address.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sun Aug 25, 2013 2:01 am

Firstly, according to 3.6.6 at http://www.softether.org/4-docs/1-manua ... al_Bridges, it seems using using wireless as local bridge is not recommended.

Secondly, I do not have such problem with using D-Link routers, what router do you use?

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sun Aug 25, 2013 2:04 am

KevCar wrote:
> For fun I installed the dhcp server on the VPN server to see if it would
> make a difference. Client still does not receive an IP address.
There is a bug that VPN Clients cannot communicate with other services of the VPN Server after connected, assuming there is one network adapter on the server.

kh_tsang
Posts: 551
Joined: Wed Jul 24, 2013 12:09 pm

Re: Error 720

Post by kh_tsang » Sun Aug 25, 2013 2:30 am

Maybe you can try enable SecureNAT again, but please disable NAT function in the SecureNAT configuration, configure the DHCP in the SecureNAT so that it will match the subnet of the Local LAN network, disable any DHCP Server outside the server and enable the local bridge without disabling the SecureNAT.

Post Reply