Softether Client on Asus RT-AC68U

[jakeycrx]

Hi,

I've setup the Softether client on my RT-AC68U and it connects to the 2 servers on 2 seperate machines and LAN's correctly with no errors reported in the log and I can see the session is active on the server side. The problem is that I can't ping anything, it's like it's not connected. If I connect to the same servers using a Windows client on my PC then all is good. I'm using the default settings, the only thing I changed was setting bool AllowRemoteConfig true so I could use the client manager.

I'm guessing I need to change something for the IP routing in the config but I thought all the routing was controlled by the server?

This is my config to the 2 seperate servers. They are on completely seperate LAN's and they both work fine if I connect using the Windows client.

# Software Configuration File
# ---------------------------
#
# You may edit this file when the VPN Server / Client / Bridge program is not running.
#
# In prior to edit this file manually by your text editor,
# shutdown the VPN Server / Client / Bridge background service.
# Otherwise, all changes will be lost.
#
declare root
{
bool DontSavePassword false
byte EncryptedPassword xxxxxxxxxx
bool PasswordRemoteOnly false
string UserAgent Mozilla/5.0$20(Windows$20NT$206.3;$20WOW64;$20rv:29.0)$20Gecko/20100101$20Firefox/29.0
uint UseSecureDeviceId 0

declare AccountDatabase
{
declare Account0
{
bool CheckServerCert false
uint64 CreateDateTime 1663261259627
uint64 LastConnectDateTime 1663311158904
string ShortcutKey xxxxxxxxx
bool StartupAccount false
uint64 UpdateDateTime 1663284800290

declare ClientAuth
{
uint AuthType 3
byte ClientCert
xxxxxxxxx
byte ClientKey
xxxxxxxxx
string Username Jake
}
declare ClientOption
{
string AccountName New$20VPN$20Connection
uint AdditionalConnectionInterval 1
uint ConnectionDisconnectSpan 0
string DeviceName VPN
bool DisableQoS false
bool HalfConnection false
bool HideNicInfoWindow false
bool HideStatusWindow false
string Hostname xxxxxxxxx.softether.net
string HubName VPN
uint MaxConnection 1
bool NoRoutingTracking true
bool NoTls1 false
bool NoUdpAcceleration false
uint NumRetry 4294967295
uint Port 443
uint PortUDP 0
string ProxyName $
byte ProxyPassword $
uint ProxyPort 0
uint ProxyType 0
string ProxyUsername $
bool RequireBridgeRoutingMode false
bool RequireMonitorMode false
uint RetryInterval 15
bool UseCompress false
bool UseEncrypt true
}
}
declare Account1
{
bool CheckServerCert false
uint64 CreateDateTime 1663311254888
uint64 LastConnectDateTime 1663311258900
string ShortcutKey xxxxxxxxxxx
bool StartupAccount false
uint64 UpdateDateTime 1663311254888

declare ClientAuth
{
uint AuthType 3
byte ClientCert
xxxxxxxxx
byte ClientKey
xxxxxxxxx
string Username Test
}
declare ClientOption
{
string AccountName Test
uint AdditionalConnectionInterval 1
uint ConnectionDisconnectSpan 0
string DeviceName VPN
bool DisableQoS false
bool HalfConnection false
bool HideNicInfoWindow false
bool HideStatusWindow false
string Hostname xxxxxxxx.softether.net
string HubName VPN
uint MaxConnection 1
bool NoRoutingTracking true
bool NoTls1 false
bool NoUdpAcceleration false
uint NumRetry 4294967295
uint Port 443
uint PortUDP 0
string ProxyName $
byte ProxyPassword $
uint ProxyPort 0
uint ProxyType 0
string ProxyUsername $
bool RequireBridgeRoutingMode false
bool RequireMonitorMode false
uint RetryInterval 15
bool UseCompress false
bool UseEncrypt true
}
}
}
declare ClientManagerSetting
{
bool EasyMode false
bool LockMode false
}
declare CommonProxySetting
{
string ProxyHostName $
uint ProxyPort 0
uint ProxyType 0
string ProxyUsername $
}
declare Config
{
bool AllowRemoteConfig true
uint64 AutoDeleteCheckDiskFreeSpaceMin 104857600
string KeepConnectHost keepalive.softether.org
uint KeepConnectInterval 50
uint KeepConnectPort 80
uint KeepConnectProtocol 1
bool NoChangeWcmNetworkSettingOnWindows8 false
bool UseKeepConnect false
}
declare RootCA
{
}
declare UnixVLan
{
declare VPN
{
bool Enabled true
string MacAddress xxxxxxxxxx
}
}
}

[solo]

I'm guessing I need to change something for the IP routing in the config but I thought all the routing was controlled by the server?

Yeah, on Linux you may have to add a route before dhclient on the SE vNIC. No, the server doesn't do any routing.