Page 1 of 1

Problems with routing in Softether VPN

Posted: Wed Dec 27, 2023 6:27 pm
by kaweewattt
Cannot set IPv4 route when using Softether VPN.

I am trying to set route for specific IP range through VPN.
But when connection is made it ends up putting 0.0.0.0/1 through VPN.

No problem when using SSTP, only for Softether VPN.

My setting

Image
upload


Route after connection was made

Image
upload

Re: Problems with routing in Softether VPN

Posted: Wed Dec 27, 2023 7:17 pm
by kaweewattt
Look like bugs when using DHCP



Route after set fixed IP address... still incorrect

Image
upload


Route after set fixed IP and fixed gateway ... correct

Image
upload

Re: Problems with routing in Softether VPN

Posted: Wed Dec 27, 2023 7:54 pm
by admin
Hello,

this is not a bug but is expected behavior.
DHCP client sets default gateway when receiving DHCP_OP_ROUTER (0x03) option
The DHCP client is only used if a static address is not set.
However the VPN log shows what happens

Re: Problems with routing in Softether VPN

Posted: Wed Dec 27, 2023 8:27 pm
by kaweewattt
That is not supposed to happened when "redirect gateway" is unchecked.

If that is supposed to happen.... how can I redirect just a specific target IP range through VPN (in my case 192.168.99.0/24) but not the public IP (such as google.com)?

When I am using SSTP that is not a problem with the same VPN server and the same route setting.

Re: Problems with routing in Softether VPN

Posted: Wed Dec 27, 2023 8:47 pm
by kaweewattt
My route with same setting but in SSTP protocol
which is totally different compared to Softether protocol

I can route specific IP range through VPN while accessing web/internet content bypassing VPN.

Image

Re: Problems with routing in Softether VPN

Posted: Thu Dec 28, 2023 9:09 am
by admin
The "Redirect gateway" options is used to force the client to redirect all packets regardless of the server configuration.

This happens because they are two different protocols.
The SSTP protocol is configured through the PPP protocol, while the SoftEther protocol is configured with the DHCP protocol.
The SoftEther server Virtual HUB most likely has Secure NAT enabled. If so you can edit the Secure NAT configuration and remove the Default Gateway Address. In this way the DHCP client will no longer receive the DHCP_OP_ROUTER option and so not set the default routes