Line 1: |
Line 1: |
| + | ==Maintainer== |
| + | This howto has been developed by [[User:beckynet]] |
| + | |
| + | Sources info are located here : http://www.softether.org/ |
| + | |
| Placeholder for http://forums.contribs.org/index.php/topic,52134.0.html | | Placeholder for http://forums.contribs.org/index.php/topic,52134.0.html |
| + | |
| + | ==Status== |
| + | {{Note box|Project Under Development.}} |
| + | |
| + | ==Description== |
| + | SoftEther VPN ("SoftEther" means "Software Ethernet") is one of the world's most powerful and easy-to-use multi-protocol VPN software. |
| + | It runs on Windows, Linux, Mac, FreeBSD and Solaris. SoftEther VPN is open source. You can use SoftEther for any personal or commercial use for free charge. |
| + | SoftEther VPN is an optimum alternative to OpenVPN andMicrosoft's VPN servers. |
| + | SoftEther VPN has a clone-function of OpenVPN Server. |
| + | You can integrate from OpenVPN to SoftEther VPN smoothly. |
| + | SoftEther VPN is faster than OpenVPN. SoftEther VPN also supports Microsoft SSTP VPN for Windows Vista / 7 / 8 / 10. |
| + | No more need to pay expensive charges for Windows Server license for Remote-Access VPN function. |
| + | SoftEther VPN can be used to realize BYOD (Bring your own device) on your business. |
| + | If you have smartphones, tablets or laptop PCs, SoftEther VPN's L2TP/IPsec server function will help you to establish a remote-access VPN from your local network. |
| + | SoftEther VPN's L2TP VPN Server has strong compatible withWindows, Mac, iOS and Android. |
| + | [[Image:SoftEther_Schematic.jpg]] |
| + | |
| + | ==Processing== |
| + | |
| + | Step to install and run SoftEther |
| + | |
| + | ===Configure Port Forwarding=== |
| + | |
| + | {| cellspacing="0" border="1" |
| + | |Protocol |
| + | |Source Port(s) |
| + | |Destination Host IP Address |
| + | |Destination Port(s) |
| + | |Allow Hosts |
| + | |Rule Comment |
| + | |Action |
| + | |- |
| + | |TCP |
| + | |1194 |
| + | |localhost |
| + | |1194 |
| + | | |
| + | |SoftEther OpenVPN |
| + | | |
| + | |- |
| + | |TCP |
| + | |5555 |
| + | |localhost |
| + | |5555 |
| + | | |
| + | |SoftEther Management |
| + | | |
| + | |- |
| + | |UDP |
| + | |1194 |
| + | |localhost |
| + | |1194 |
| + | | |
| + | |SoftEther OpenVPN |
| + | | |
| + | |- |
| + | |UDP |
| + | |500 |
| + | |localhost |
| + | |500 |
| + | | |
| + | |SoftEther SoftEther L2TP/IPSec |
| + | | |
| + | |- |
| + | |UDP |
| + | |1701 |
| + | |localhost |
| + | |1701 |
| + | | |
| + | |SoftEther SoftEther L2TP/IPSec |
| + | | |
| + | |- |
| + | |UDP |
| + | |4500 |
| + | |localhost |
| + | |4500 |
| + | | |
| + | |SoftEther SoftEther L2TP/IPSec |
| + | | |
| + | |- |
| + | |} |
| + | |
| + | ===Download, Install and Run SoftEther=== |
| + | |
| + | Install needed tools |
| + | |
| + | yum install gcc |
| + | |
| + | |
| + | For SME 9.x 32 Bits |
| + | |
| + | cd /opt |
| + | wget http://www.softether-download.com/files/softether/v4.18-9570-rtm-2015.07.26-tree/Linux/SoftEther_VPN_Server/32bit_-_Intel_x86/softether-vpnserver-v4.18-9570-rtm-2015.07.26-linux-x86-32bit.tar.gz |
| + | tar zxvf softether-vpnserver-v4.18-9570-rtm-2015.07.26-linux-x86-32bit.tar.gz |
| + | cd vpnserver |
| + | make # Read and Accept License Agreement, after compile (1 min) |
| + | ./vpnserver start |
| + | |
| + | For SME 9.x 64 Bits |
| + | |
| + | cd /opt |
| + | wget http://www.softether-download.com/files/softether/v4.18-9570-rtm-2015.07.26-tree/Linux/SoftEther_VPN_Server/64bit_-_Intel_x64_or_AMD64/softether-vpnserver-v4.18-9570-rtm-2015.07.26-linux-x64-64bit.tar.gz |
| + | tar zxvf softether-vpnserver-v4.18-9570-rtm-2015.07.26-linux-x64-64bit.tar.gz |
| + | cd vpnserver |
| + | make # Read and Accept License Agreement, after compile (1 min) |
| + | ./vpnserver start |
| + | |
| + | ===Finishing Installation On Windows=== |
| + | |
| + | Download Management Interface<BR> |
| + | http://www.softether-download.com/files/softether/v4.18-9570-rtm-2015.07.26-tree/Windows/SoftEther_VPN_Server_and_VPN_Bridge/softether-vpnserver_vpnbridge-v4.18-9570-rtm-2015.07.26-windows-x86_x64-intel.exe |
| + | |
| + | After installation Clic On New Setting<BR> |
| + | [[Image:SoftEther_WIN_1.png]] |
| + | |
| + | Set Setting Name, Set Host Name, Choose Port Number 5555<BR> |
| + | [[Image:SoftEther_WIN_2.png]] |
| + | |
| + | Connect<BR> |
| + | [[Image:SoftEther_WIN_3.png]] |
| + | |
| + | Create Management Password<BR> |
| + | [[Image:SoftEther_WIN_4.png]] |
| + | |
| + | Choose Remote Access VPN Server<BR> |
| + | [[Image:SoftEther_WIN_5.png]] |
| + | |
| + | Create Virtual Hub Name<BR> |
| + | [[Image:SoftEther_WIN_6.png]] |
| + | |
| + | Set Dynamic DNS if Needed (Dynamic IP)<BR> |
| + | [[Image:SoftEther_WIN_7.png]] |
| + | |
| + | Enable L2TP/IPSec And Create Pre-Shared Key (No More Of 10 Charactere for compatibility with Android)<BR> |
| + | [[Image:SoftEther_WIN_8.png]] |
| + | |
| + | Disable VPN Azure<BR> |
| + | [[Image:SoftEther_WIN_9.png]] |
| + | |
| + | Create User(s)<BR> |
| + | [[Image:SoftEther_WIN_10.png]] |
| + | |
| + | Set User Name, Autentification Method, Password<BR> |
| + | [[Image:SoftEther_WIN_11.png]] |
| + | |
| + | Create Local Bridge<BR> |
| + | [[Image:SoftEther_WIN_14.png]] |
| + | |
| + | Choose Virtual Hub, Choose Bridge With Tap Device, Set Tap Device Name : soft<BR> |
| + | [[Image:SoftEther_WIN_15.png]] |
| + | |
| + | ===Check On SME=== |
| + | |
| + | # ifconfig |
| + | tap_soft Link encap:Ethernet HWaddr 00:AC:0D:17:8E:2D |
| + | UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 |
| + | RX packets:0 errors:0 dropped:0 overruns:0 frame:0 |
| + | TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 |
| + | collisions:0 txqueuelen:500 |
| + | RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) |
| + | |
| + | ===Auto Start SoftEther vpnserver=== |
| + | |
| + | nano /etc/init.d/vpnserver |
| + | |
| + | #!/bin/sh |
| + | # |
| + | ### BEGIN INIT INFO |
| + | # Provides: vpnserver |
| + | # Default-Start: |
| + | # Default-Stop: |
| + | # Should-Start: portreserve |
| + | # Required-Start: $network |
| + | # Required-Stop: |
| + | # Short-Description: Start and stop the vpnserver server |
| + | # Description: SoftEther VPN Server. |
| + | ### END INIT INFO |
| + | DAEMON=/opt/vpnserver/vpnserver |
| + | LOCK=/var/lock/subsys/vpnserver |
| + | test -x $DAEMON || exit 0 |
| + | case "$1" in |
| + | start) |
| + | $DAEMON start |
| + | touch $LOCK |
| + | ;; |
| + | stop) |
| + | $DAEMON stop |
| + | rm $LOCK |
| + | ;; |
| + | restart) |
| + | $DAEMON stop |
| + | sleep 3 |
| + | $DAEMON start |
| + | ;; |
| + | *) |
| + | echo "Usage: $0 {start|stop|restart}" |
| + | exit 1 |
| + | esac |
| + | exit 0 |
| + | |
| + | Start In Run Level 7 |
| + | |
| + | chmod 755 /etc/init.d/vpnserver |
| + | ln -s /etc/init.d/vpnserver /etc/rc7.d/S79vpnserver |
| + | |
| + | ===Download And Install Bridging=== |
| + | |
| + | {{Note box|the procedure below is a little dirty, but I don't want to have dependency (OpenVPN). see TODO}} |
| + | |
| + | For SME 9.x 32 Bits |
| + | |
| + | rpm -i http://koozali.groenz.co.nz/releases/9.1/smecontribs/i386/RPMS/smeserver-bridge-interface-0.2-1.el6.sme.noarch.rpm --nodeps |
| + | signal-event post-upgrade; signal-event reboot |
| + | |
| + | For SME 9.x 64 Bits |
| + | |
| + | rpm -i http://koozali.groenz.co.nz/releases/9.1/smecontribs/x86_64/RPMS/smeserver-bridge-interface-0.2-1.el6.sme.noarch.rpm --nodeps |
| + | signal-event post-upgrade; signal-event reboot |
| + | |
| + | ===Configure Bridging and restart=== |
| + | |
| + | config setprop bridge ethernetInterface YOUR_LAN_INTERFACE |
| + | config setprop bridge tapInterface tap_soft |
| + | /etc/init.d/bridge restart |
| + | |
| + | Check Bridge |
| + | |
| + | # brctl show |
| + | bridge name bridge id STP enabled interfaces |
| + | br0 8000.00ac0d178e2d no em1 |
| + | tap_soft |
| + | |
| + | ===Test With Windows=== |
| + | |
| + | {{Note box|Sorry For ScreenShot In French it's My Mother Language}} |
| + | |
| + | Create VPn Connection<BR> |
| + | |
| + | Set Internet Address and Destination Name, clic do not connect now and Next<BR> |
| + | [[Image:SoftEther_WIN_CON_1.png]] |
| + | |
| + | |
| + | Set User Name and Password<BR> |
| + | [[Image:SoftEther_WIN_CON_2.png]] |
| + | |
| + | Set Property On Your VPN Connection<BR> |
| + | [[Image:SoftEther_WIN_CON_4.png]] |
| + | |
| + | Choose VPN Network Type and clic on Advanced Settings<BR> |
| + | [[Image:SoftEther_WIN_CON_5.png]] |
| + | |
| + | Type Your Pre-Shared Key<BR> |
| + | [[Image:SoftEther_WIN_CON_6.png]] |
| + | |
| + | Make A Connection and Check State<BR> |
| + | [[Image:SoftEther_WIN_CON_7.png]] |
| + | |
| + | You can now access your samba ressources ! |
| + | |
| + | ==TODO== |
| + | |
| + | Create a rpm with softether vpnserver RTM<BR> |
| + | Create a rpm with a bridge for softether<BR> |
| + | Use SME Radius |