Reason that softether on OpenWRT lose settings on reboot is because it only saves config after stopping the service, so need to tunnel in and stop the service then reboot after reconfigure

Remember to set Virtual NAT+DHCP, or else windows client autodrop.

Update: The NAT+DHCP doesn't have to be on softether, create a tap device and use the host as NAT+DHCP is possible. Setting isolation mode in Softether will block host from forwarding packets.

Meaning:

  • Reverst VPN is possible
  • Have one server connect in and DSTNAT is possible
  • Static DHCP through OpenWRT also possible which is good as SoftEther's DHCP can't do static, which is bad for servers
  • IPv4 Address. . . . . . . . . . . : 192.168.X.X
    Subnet Mask . . . . . . . . . . . : 255.255.255.255
    Default Gateway . . . . . . . . . : 0.0.0.0
    Seems to be bacause how windows implemented, the DHCP server still performs normally ( has 255.255.x.x and a proper gateway )

Weird behaviour:

  • Having Router(Mikrotik) connect to the Softether and device connected to the Router also connect to Softether
    • The session list in softether seems OK
    • However, the tap device will confuse one of the device under the router with router itself, so DHCP will have some problem (how to solve?)
  • Workaround will be using a machine under the router to connect to the Softether to reverse VPN

Additional setup:

  • As routerOS still doesn't support advanced encryption of handshaking on SSTP, will open legacy L2TP just for routers.
Created by Victor Zhang on 16:05, 23/06/2020