SecureNAT is needed in my case?

[theselby]

Hello,

Here's my usecase scenario
I have a running configuration of softEther VPN which currently works, but uses a bit of CPU.
The need I have for the VPN is only to allow connectivity between VPN-computers while all their internet traffic actually happens on their internet, nothing gets "browsed" via my VPN server to hide their IP/etc.

So there is SERVER:
* client 1, IP x.x.x.1
* client 2, IP x.x.x.2
*** etc
* client 3, IP x.x.x.99

My purpose is to allow x.x.x.72 to communicate (via some other app i have) with x.x.x.3 or any other in the VPN

Now, again, for this purpose, what would be the best configuration? Do I need SecureNAT?

[solo]

If you have only 3 clients then you could drop SecNAT, bridge it and use static IPs w/o DG.

[theselby]

it's not only 3 clients, could be 20 or 50 or whatever

[solo]

Then SecNAT is more manageable.