Blog - Softether on OpenWRT Trick

Page / - last modified by Victor Zhang on 00:28, 22/07/2020

Softether on OpenWRT Trick

last modified by Victor Zhang

on 00:28, 22/07/2020

Table of Contents

Reason that softether on OpenWRT lose settings on reboot is because it only saves config after stopping the service, so need to tunnel in and stop the service then reboot after reconfigure

Remember to set Virtual NAT+DHCP, or else windows client autodrop.

Update: The NAT+DHCP doesn't have to be on softether, create a tap device and use the host as NAT+DHCP is possible. Setting isolation mode in Softether will block host from forwarding packets.

Meaning:

Reverst VPN is possible

Have one server connect in and DSTNAT is possible

Static DHCP through OpenWRT also possible which is good as SoftEther's DHCP can't do static, which is bad for servers

IPv4 Address. . . . . . . . . . . : 192.168.X.X
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 0.0.0.0
Seems to be bacause how windows implemented, the DHCP server still performs normally ( has 255.255.x.x and a proper gateway )

Weird behaviour:

Having Router(Mikrotik) connect to the Softether and device connected to the Router also connect to Softether

The session list in softether seems OK

However, the tap device will confuse one of the device under the router with router itself, so DHCP will have some problem (how to solve?)

Workaround will be using a machine under the router to connect to the Softether to reverse VPN

Additional setup:

As routerOS still doesn't support advanced encryption of handshaking on SSTP, will open legacy L2TP just for routers.

Posted by Victor Zhang · Permalink