I deployed SoftEther server on my raspberry pi running raspbian, and just as the document chapter 3.6.11 has stated, I can communicate with any other machine in the LAN, but I can't connect to any service run on the raspberry pi itself. Adding a wlan dongle and getting a secondary ip address didn't seem to help - I ended up not being able to connect to either ip address.
Next I tried SecureNAT, the client iphone connected and was allocated ip address 192.168.30.10, however, running ifconfig on raspberry pi show no interface with ip 192.168.30.1, which means I still can't connect to services on my raspberry pi from my iphone.
I just need to be able to communicate with the VPN server itself from the client, and am not interested in visiting other machines in the LAN. What should I do? Thanks!
How to visit the VPN server itself?
-
kh_tsang
- Posts: 551
- Joined: Wed Jul 24, 2013 12:09 pm
Re: How to visit the VPN server itself?
Add a tap device, use the routing feature and NAT of your OS instead of Secure NAT.
-
yumemi5k
- Posts: 6
- Joined: Thu Apr 02, 2015 10:42 am
Re: How to visit the VPN server itself?
kh_tsang wrote:
> Add a tap device, use the routing feature and NAT of your OS instead of
> Secure NAT.
It worked! I set up dnsmasq and iptables on my Pi, now at least I can connect to the http server.
Just one issue remains - iphone won't accept proxy settings for VPN connections, invalidating the whole point of my VPN connection. A brief search revealed similar reports without conclusive solutions. I guess it's an ios bug, but either way it would be beyond the scope of this topic.
Thank you very much!
> Add a tap device, use the routing feature and NAT of your OS instead of
> Secure NAT.
It worked! I set up dnsmasq and iptables on my Pi, now at least I can connect to the http server.
Just one issue remains - iphone won't accept proxy settings for VPN connections, invalidating the whole point of my VPN connection. A brief search revealed similar reports without conclusive solutions. I guess it's an ios bug, but either way it would be beyond the scope of this topic.
Thank you very much!