SoftEther VPN User Forum

Hi,

I'm starting a new thread on this topic because I didn't correctly phrase my question in the previous thread.

I have a Server 2012 R2 server on which I would like to install and run SoftEther VPN server. I have a record set up at my ISP's DNS that points VPN.MyServer.Org to my server's static IP. I have a Comodo SSL cert named VPN.MyServer.Org installed on my server.

Can I set up SoftEther VPN server so that when people put VPN.MyServer.Org as the address in their VPN clients, it will connect to my SoftEther VPN server and authenticate via the already installed SSL cert VPN.MyServer.Org?

Or must I use the SoftEther address and the SoftEther cert?

I don't get, what your real problem/question is.
You can import and use your comodo certficate via Cert Import function (see attached screenshot). But I think, this was also said in the last topic.
After that, your server authenticates itself by this imported certificate and your clients can be sure, that VPN.MyServer.Org is indeed VPN.MyServer.Org.

I will try to clarify my question:

Currently the server does not host a website, and we connect to it using its static IP. We can also use VPN.MyServer.Org, which resolves to that static IP, and we have an SSL also named VPN.MyServer.Org.

When I install SoftEther VPN server, it asks me to create a cert and to select a dynamic name (Me.SoftEther.Org) that it wants me to use to connect to my SoftEther VPN server. I know now that I can use my own cert. Instead of the SoftEther dynamic address (Me.SoftEther.Org), can I use my own server address (VPN.MyServer.Org)?

In other words, if at my client I type in the address VPN.MyServer.Org, will it connect to the SoftEther VPN and authenticate to my own SSL cert?

Yes you can.

Lovely. Thanks!

qupfer wrote:
> Yes you can.

The server will be behind a NAT firewall. Will I need to forward ports to the server?

In the default setting, the VPN client doesn't verify the server cert.
If you want to let the VPN client verify the server cert, you have to import the server cert or CA cert to the client and enable the verification.