[LINUX] Initialize Softether VPN server with GUI

Introduction

This article is for those who have completed the server side construction in Previous article. If you haven't done so, please do so first.

Batch registration of users

Attention and explanation

This section is for those who have built VPN in the past and have a user registration batch file. If this is your first time, skip to the next #Download Server Management Tool.

Batch file example

This time, user registration and password registration are processed in a batch file. The format is as follows.

In addition, after completing the initial settings such as creating vpnhub, register the user and create the group.

Hub hubname
UserCreate username /GROUP:groupname /NOTE:none /REALNAME:hogeyama tarou
UserPasswordSet username /password:password

Batch execution

You can save the batch anywhere. Execute it with the following command.

/usr/local/vpnserver/vpncmd /server serveradress /in:/home/hoge/batch.txt

You can enter adress as localhost.

The command completed successfully

Is displayed, the process is complete.

Download server management tools

Install the server management tool on the client windows PC. Please select Softether VPN Server → Windows → Intel (x86 and x64) from Official Download Site. Download the top rtm version.

Install server management tools

Install the software you downloaded earlier. Double-click to run and follow the on-screen instructions. If the following screen is displayed on the way, select the server management manager at the bottom.

Start the manager and register the connection destination

When you start the management manager, the following screen will be displayed. Now select the new connection settings on the left side of the center. You can change the connection setting name as you like. Enter the global IP address of the server as the host name, and click OK without changing anything else.

Setting management password

You will be returned to the first screen, so double-click the connection settings you set earlier. Then, the screen for setting the management password will appear as shown below, so set it arbitrarily. If you see a screen saying that you have changed your password, you are successful.

Initial setup wizard

When the password setting is completed, the initial setting screen will appear. On this screen, select the remote access VPN server at the top. A warning will be displayed saying that the current settings will be initialized, but since the initial settings have been made, there is no problem. Select Yes. The virtual hub name can be the default. After setting, select OK. The dynamic DNS function (DDNS) setting screen will appear, but since it will not be used, select Close. It is a setting screen such as IPsec. You can connect to VPN with standard OS functions on android, windows, and ios. This time, we will access from windows using Softether client software, so select OK as it is. Settings related to VPN Azure. Since it will not be used, select Disable at the bottom right and click OK. This is the setting screen for the VPN client. Select Create User in Section 1. This is the user creation screen. Enter your username and password (on the right) and select OK. You have created a user (username). If it comes out, it is a success. Press OK. If you want to add more users, you can add them here. You can also add it later instead of now. Please select close. You will be returned to this screen, so select Close.

Management screen

This is the home of the management screen. Please refer to Official Document for detailed usage.

Continuation of initial setting

Set the range that the wizard cannot do. Note that this setting is only for use in my client environment, so it does not guarantee the operation of everyone.

Local bridge settings

Select Local Bridge Settings at the bottom right of the admin screen home. When this screen appears, select the virtual hub you created first from the definition of the new local bridge. Select ... with new tap device for the type to create You can set the new tap device name as you like, but tap1 is recommended. After entering the name, select Add Local Bridge at the bottom right. A warning will be displayed, but yes, select OK to continue.

Virtual NAT settings

Return to the management screen home, select the virtual hub you created first, and select Manage Virtual Hub. When this screen appears, select Virtual NAT and ... at the bottom right. Select Enable Secure NAT function on this screen. Press OK to continue. Select the Secure NAT setting on the right. Set the beginning of the upper right MAC address to 00-AC, leave the rest as it is, and select OK.

VPN client download

Install the Client Connection Tool on the Client windows PC. Select Softether VPN Client → Windows → Intel (x86 and x64) from Official Download Site. Download the top rtm version.

Client installation

Execute the downloaded file. Select Next on the first screen. Then select the client above on this screen and click Next Then follow the instructions on the screen.

Client connection settings

The Client Connection Tool opens after the installation is complete. This screen is the client's home. Select Create new connection settings above. You will be asked to install a virtual LAN card, so just select Yes. Leave the name of the virtual LAN card as it is and select OK. After completing the LAN card creation, select Create new connection settings above again. The connection setting name can be set arbitrarily. The host name is the domain of the server, Port is the default 443 The virtual hub name is the virtual hub name created earlier. Set the proxy type to suit your environment. Enter the connection information of the user created by the initial setup wizard in the user authentication on the right side. After entering all, select OK. You will be returned to the client home, so double-click the connection settings you have just set to connect. If you see a screen like this, you are successful.

end

Have a good VPN life! !!

References

Official documentation https://ja.softether.org/4-docs/1-manual/3.SoftEther_VPN_Server%E3%83%9E%E3%83%8B%E3%83%A5%E3%82%A2%E3%83%AB/3.3_VPN_Server_%E7%AE%A1%E7%90%86 Official documentation-batch processing https://ja.softether.org/4-docs/1-manual/6/6.2