Problems with securenat and authentication
Posted: Fri Apr 11, 2014 8:32 am
Here are the symptoms:
1,Individual certificate authentication doesn't work. Settings can not be saved. Even when I edit the config file manually, it will be replaced with password authentication.
2,Clients can't receive ip addresses form virtual dhcp as well as pushed routes.
Everything works fine on windows, so I don't think it has anything to do with the server.
Here are my clients' environments.
1. Operating system name and the type of CPU-bits
arm linux 3.4 and openwrt AA 12.9
2. The result of "ifconfig –a" (UNIX) or "ipconfig /all" (Windows)
eth0 Link encap:Ethernet HWaddr 00:24:8c:02:75:70
inet addr:192.168.100.250 Bcast:192.168.100.255 Mask:255.255.255.0
inet6 addr: fe80::224:8cff:fe02:7570/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1807256 errors:0 dropped:385 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:531355795 (506.7 MiB) TX bytes:644812156 (614.9 MiB)
tunl0 Link encap:IPIP Tunnel HWaddr
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
vpn_net0 Link encap:Ethernet HWaddr 00:ac:5e:94:b9:53
inet addr:192.168.10.2 Bcast:192.168.10.255 Mask:255.255.255.0
inet6 addr: fe80::2ac:5eff:fe94:b953/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3918 errors:0 dropped:0 overruns:0 frame:0
TX packets:3639 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:244986 (239.2 KiB) TX bytes:262262 (256.1 KiB)
I added that ip to vpn_net0 manually.
4. The build number of SoftEther VPN
4.06-9437-beta-2014.04.09 for arm linux and 4.06-9435 for openwrt
6. Whether or not there is a NAT or Firewall between your VPN server and the Internet.
no
7. Are you using SecureNAT?
Yes
1,Individual certificate authentication doesn't work. Settings can not be saved. Even when I edit the config file manually, it will be replaced with password authentication.
2,Clients can't receive ip addresses form virtual dhcp as well as pushed routes.
Everything works fine on windows, so I don't think it has anything to do with the server.
Here are my clients' environments.
1. Operating system name and the type of CPU-bits
arm linux 3.4 and openwrt AA 12.9
2. The result of "ifconfig –a" (UNIX) or "ipconfig /all" (Windows)
eth0 Link encap:Ethernet HWaddr 00:24:8c:02:75:70
inet addr:192.168.100.250 Bcast:192.168.100.255 Mask:255.255.255.0
inet6 addr: fe80::224:8cff:fe02:7570/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1807256 errors:0 dropped:385 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:531355795 (506.7 MiB) TX bytes:644812156 (614.9 MiB)
tunl0 Link encap:IPIP Tunnel HWaddr
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 B) TX bytes:0 (0.0 B)
vpn_net0 Link encap:Ethernet HWaddr 00:ac:5e:94:b9:53
inet addr:192.168.10.2 Bcast:192.168.10.255 Mask:255.255.255.0
inet6 addr: fe80::2ac:5eff:fe94:b953/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:3918 errors:0 dropped:0 overruns:0 frame:0
TX packets:3639 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:244986 (239.2 KiB) TX bytes:262262 (256.1 KiB)
I added that ip to vpn_net0 manually.
4. The build number of SoftEther VPN
4.06-9437-beta-2014.04.09 for arm linux and 4.06-9435 for openwrt
6. Whether or not there is a NAT or Firewall between your VPN server and the Internet.
no
7. Are you using SecureNAT?
Yes